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This listing of claims will replace all prior versions, and 
listings, of claims in the application: 
Listing of Claims: 

1. (Cancelled) 

2. (Cancelled) 

3. (Cancelled) 

4. (Cancelled) 

5. (Cancelled) 

6. (Previously Amended) A system for establishing a debit account 
via a point of sale transaction comprising: 

(a) a transaction terminal, said terminal including input 
means, display means, and processing means; 

(b) printing means operatively coupled to said transaction 
terminal; 

(c) communications means integral to said transaction 
terminal; 

(d) a secure host server in communication with said 
transaction terminal; 

(e) said transaction terminal including: means for Initiating 
said point of sale transaction to accept funds, from a customer to 
be deposited into a debit, account; means for accepting an input 
value representing funds to be deposited into said debit account; 
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means for accessing said secure host server via said communications 
means; means for transmitting said input value to said secure host 
server; means for receiving a debit account number unique to said 
transaction; means to assign a customer selected personal 
identification number ( PIN) to said debit account number during 
said transaction; and means for providing said debit account number 
and said PIN to said customer in readable format. 

7. (Previously amended) The system of claim 6, wherein said 
secure host server is operatively coupled to a processing means; 
said processing means including: means for creating a debit account 
specific to said transaction, means for assigning a unique debit 
account number [[with]] to said debit account; and means for 
storing an electronic representation of currency equivalent to the 
input value into said debit account; and means for associating said 
personal identification number (PIN) with said debit account. 

8. (Previously amended) The system of claim 6, further comprising 
a database for storing said debit account number, said database 
further including account balance information associated with said 
debit account number, wherein said funds can be withdrawn from said 
debit account by a customer using said debit account number and 
said PIN. 
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03544019 INSPEC Abstract Number: C8505 1245, 

Title: Research databanks-international state-of-art and experience from their constitution at the AdW of the 
GDR 

Author Keil, D. 
Publication Date: 1985 
1985 



6/6,AU,PY/18 (Item 18 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
03537558 INSPEC Abstract Number: A851 16798 

Title: Rate constants for the reaction of hydroxyl radicals with acctaldehyde from 244-528K 
Author Michael, J.V.; Keil, D.G.; Klemm, R.B. 
Publication Date: 15 Aug. 1985 
1985 



6/6,AU,PY/19 (Item 19 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
03169397 INSPEC Abstract Number: A8401 01 79 
Title: Supercooled molecules in molecular beams of ICI and IBr 
Author Keil, D.; Lubbert, A.; Schugerl, K. 
Publication Date: 15 Oct. 1983 
1983 



6/6,AU,PY/20 (Item 20 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
0277 1 1 96 INSPEC Abstract Number: A8 1 1 06927 

Title: Rate constants for the reaction of ground state atomic oxygen with methanol 
Author Keil, D.G.; Tanzawa, T.; Skolnik, E.G.; Klemm, R.B.; Michael, J.V. 
Publication Date: 15 Sept. 1981 
1981 



6/6,AU,PY/21 (Item 21 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
02593501 INSPEC Abstract Number: A80102538 

Title: Fluorescence lifetime studies of NO/sub 21. IV. Temperature dependence of fluorescence spectra and of 

collisional quenching of fluorescence 

Author Keil, D.G.; Donnelly, V.M.; Kaufman, F. 



Publication Date: 15 Aug. 1980 
1980 



>>>W: Some display codes not found in file 583: AU 

6/6,AU,PY/22 (Item 22 from file: 2) Links 
1NSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
02471349 INSPEC Abstract Number: A80026001 

Title: Vibrational energy transfer in thermal unimolecular systems by the diffusion cloud method. 
Cyclopropane 

Author Kamaratos, E.; Burkhalter, J.F.; Keil, D.G.; Rabinovitch, B.S. 
Publication Date: 19 April 1979 
1979 



6/6,AU,PY/23 (Item 23 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
02415195 INSPEC Abstract Number: A79089701 

Title: Fluorescence lifetime studies of NO/sub 21. III. Mechanism of fluorescence quenching 
Author Donnelly, V.M.; Keil, D.G.; Kaufman, F. 
Publication Date: 15 July 1979 
1979 



6/6,AU,PY/24 (Item 24 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
01900925 INSPEC Abstract Number: A76040084 

Title: Defect production in purified and nitrogen doped niobium during low temperature neutron irradiation 
Author Keil, D.; Decker, W.; Diehl, J. 
Publication Date: Jan. 1976 
1976 



6/6,AU,PY/25 (Item 25 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
01625014 INSPEC Abstract Number: A74028522, B740 141 50 

Title: Influence of annealing treatments on residual resistivity and the field dependence of the electrical 
resistance of niobium at 4.2 K 
Author Keil, D.; Merbold, U.; Diehl, J. 
Publication Date: March 1974 
1974 



6/6,AU,PY/26 (Item 26 from file: 2) Links 



INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
0 1 225040 INSPEC Abstract Number: B7 1 007042 
Title: Electric insulation for incore use 
Author Keil, D. 
Publication Date: Nov. 1970 
1970 



6/6.AU.PY/27 (rtem 27 from file: 2) Links 
INSPEC 

(c) 2007 Institution of Electrical Engineers. All rights reserved. 
01125344 INSPEC Abstract Number: A70028724 

Title: Reaction H+C/sub 2/H/sub 4/: comparison of three experimental techniques 
Author Barker, J.R.; Keil, D.G.; Michael, J.V.; Osborne, D.T. 
Publication Date: 15 Feb. 1970 
1970 



6/6,AU,PY/28 (Item 1 from file: 35) Links 
Dissertation Abs Online 

(c) 2007 ProQuest lnfo&Learning. All rights reserved. 
01402971 

A STUDY OF EDGE PLASMA TRAPPING INDUCED BY ION CYCLOTRON RESONANT HEATING IN 
AN END CELL OF THE PHAEDRUS-B TANDEM MIRROR 

Author: KEIL, DOUGLAS L. 
Year: 1994 



6/6,AU,PY/29 (Item 2 from file: 35) Links 
Dissertation Abs Online 

(c) 2007 ProQuest lnfo&Learning. All rights reserved. 
511782 

THE INTER-GROUP ECONOMY OF THE NEKEMATIGI, EASTERN HIGHLANDS DISTRICT, NEW 
GUINEA. 

Author: KEIL, DANA EDDY 
Year: 1974 



6/6,AU,PY/30 (Item 3 from file: 35) Links 
Dissertation Abs Online 

(c) 2007 ProQuest lnfo&Learning. All rights reserved. 
483300 

AN INVESTIGATION OF SOME GAS-PHASE REACTIONS OF HYDROGEN ATOMS WITH 
UNSATURATED HYDROCARBONS AND SOME ISOTOPIC AND MIXED ISOTOPIC VARIATIONS BY 



1> 



MASS-SPECTROMETRIC DETECTION IN A DISCHARGE FLOW SYSTEM: ABSOLUTE RATE 
DETERMINATIONS AND MECHANISM INVESTIGATIONS. 

Author: KE1L, DAVID GEORGE 
Year: 1973 



6/6,AU,PY/31 (Item 4 from file: 35) Links 
Dissertation Abs Online 

(c) 2007 ProQuest Info&Learning. All rights reserved. 
477958 

A RE-EVALUATION OF PECTIS (L.) SUBGENUS PECTIDOPSIS (DC.) FERNALD (COMPOSITAE: 
PECT1DINAE) 

Author: KEIL, DAVID JOHN 
Year: 1973 



6/6,AU,PY/32 (Item 1 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
032086 1 4 Inside Conference Item ID: CN033943684 

Characteristics of Combustion Synthesis Flames for Production of Silicon Carbide 

KEIL, D. G.; Calcote, H. F. 
Conference: American Association for Aerosol Research - Annual conference; 15th 

American Association for Aerosol Research, 1996 
( 199610 ) ( 199610) 



6/6,AU,PY/33 (Item 2 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
03185818 Inside Conference Item ID: CN033734153 
"Combustion of Boron by O SUB 2/NF SUB 3/N SUB 2 Oxidizers" 
Kcil, D. G.; Dreizin, E. 1,.; Hoffman, V. K.; Calcote, H. F. 

Conference: Combustion Institute; Eastern States Section; Chemical and physical processes in combustion - Fall 
technical meeting 

Eastern States Section of the Combustion Institute, 1997 
( 199710 ) ( 199710 ) 



6/6,AU,PY/34 (Item 3 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
03 1 1 2736 Inside Conference Item ID: CN033003330 
On the Mechanism of Boron Ignition 
Keil, D. G.; Dreizin, E. L.; Felder, W.; Vicenzi, E. P. 



V 



Conference: Joint Army-Navy-NASA-Air Force Combustion Subcommittee meeting - 34th 

Chemical Propulsion Information Agency, 1997 
( 199710 ) ( 199710 ) 

6/6,AU,PY/35 (] tem 4 f rom file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all its. reserv. All rights reserved. 
02737493 Inside Conference Item ID: CN028530847 

Profile Control of Sub-0.3 um Contact Etch Features in a Medium Density Oxide Etch Reactor 

Keil, D.; Cooperberg, D.; Li, L.; Mueller, G. 
Conference: Plasma processing - International symposium; 12th ( Plasma processing Xll ) 

Electrochemical Society, 1998 
Editor: Mathad, G. S. 
( 1 99805 )( 199805 ) 

6/6,AU,PY/36 (Item 5 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
02735410 Inside Conference Item ID: CN028510014 

Profile Control of Sub-0.3.mu,um Oxide Etch Features in a Medium-Density Oxide Etch Reactor 

Keil, D.; Mueller, G.; Nguyen, T.; Khajehnouri, K. 
Conference: Electrochemical Society - Meeting; 193rd 

Electrochemical Society, 1998 
( 199805 )( 199805 ) 

6/6,AU,PY/37 (Item 6 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
02422807 Inside Conference Item ID: CN0253 1 9478 

Co-operation between regional authorities to ensure transfrontier nuclear safety 
Keil, D. 

Conference: Nuclear safety and local/regional democracy - European conference 

Council of Europe, 1998 
( 1 99706 )( 199706 ) 

6/6,AU,PY/38 (Item 7 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 

02 1 72 1 1 8 Inside Conference Item ID: CN022789720 

Description of a Combustion Flame for the Production of Silicon Carbide 

Calcote, H. I\; Keil, D. G. 
Conference: Combustion Institute: Eastern States Section - Fall technical meeting 

Eastern States Section of the Combustion Institute, 1997 



( 199710 ) ( 199710) 



6/6,AU,PY/39 (Item 8 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
01894229 Inside Conference Item ID: CNO 19583525 

The waist to hip ratio in comparison with dual energy x-ray absorptiometry measures of regional fat 
distribution in women 

Taylor, R. W.; Keil, D.; Gold, E.; Goulding, A. 
Conference: Nutrition Society of New Zealand - Annual meeting; 31st 

The Society, 1996 
( 199608 )( 199608 ) 

6/6,AU,PY/40 (Item 9 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
01546462 Inside Conference Item ID: CNO 15354698 
Combustion Synthesis of Nanosized SiC~xN~y Powders 

Keil, D. G.; Calcote, H. F.; Gill, R. J. 
Conference: Covalent ceramics III: science and technology of non-oxides - Symposium ( Covalent ceramics 3; 

Covalent ceramics three ) 

Pittsburgh, PA, Materials Research Society, 1996 
Editor: Hepp, A. F. 
( 19951 )( 19951 ) 

6/6,AU,PY/41 (Item 10 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
0 1 24 1 222 Inside Conference Item ID: CNO 1 2 1 88675 
Why a Sharp Soot Threshold? 
Calcote, H. F.; Keil, D. G. 

Conference: Chemical and physical processes in combustion - Fall technical meeting 
The Institute, 1995 
( 19951 0 ) ( 199510 ) 



6/6,AU,PY/42 (Item 1 1 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 
01241 196 Inside Conference Item ID: CNO 121 8841 9 
Magnesium Coating Effects in Boron Combustion 

Keil, D. G.; Dreizin, E. D.; Calcote, H. F.; Felder, W. 
Conference: Chemical and physical processes in combustion - Fall technical meeting 

The Institute, 1995 



( 199510 ) ( 199510 ) 



6/6,AU,PY/43 (Item 12 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all its. reserv. All rights reserved. 
00590309 Inside Conference Item ID: CN005732499 

Staatliche Aufsicht Ueber Kernkrafbverke In Der Bundesrepublik Deutschland 
Keil, D. 

Conference: Kerntechnik '94 - Jahrestagung 

Bonn, Inforum Verlags- und Verwaltungsgesellschaft, 1994 
( 199405 )( 199405 ) 

>>>W: Some display codes not found in file 583: AU 

6/6,AU 5 PY/44 (Item 13 from file: 65) Links 
Inside Conferences 

(c) 2007 BLDSC all rts. reserv. All rights reserved. 

00 1 225 1 3 Inside Conference Item ID: CN00 1 229 1 26 

Episiotomie versus Damm-Scheidenriss - Eine prospektive Studie 

Bernard, B.; Kranzfelder, D.; Keil, D. 
Conference: 49 Versammlung 

Springer International, 1993 
Editor: Krebs, D.; Berg, D. 
( 199209 )( 199209 ) 



Set Items Description 

51 7' S AU=(KEIL D? OR KEIL, D? OR KEIL ( 2N) DEAN) 

52 4 S SI NOT PY>1998 
; show files 

[File 20] Dialog Global Reporter 1 997-2007/Feb 05 
(c) 2007 Dialog. All rights reserved. 

[File 15] ABI/Inform(R) 1 97 1 -2007/Feb 03 

(c) 2007 ProQuest Info&Learning. All rights reserved. 

[File 610] Business Wire 1 999-2007/Feb 05 
(c) 2007 Business Wire. All rights reserved. 

*File 610: File 610 now contains data from 3/99 forward. Archive data (1986-2/99) is available in File 810. 

[File 810] Business Wire 1986-1999/Feb 28 
(c) 1999 Business Wire . All rights reserved. 

[File 476] Financial Times Fulltext 1982-2007/Feb 04 
(c) 2007 Financial Times Ltd. All rights reserved. 

[File 613] PR Newswire 1 999-2007/Feb 05 

(c) 2007 PR Newswire Association Inc. All rights reserved. 

*File 613: File 613 now contains data from 5/99 forward. Archive data (1987-4/99) is available in File 813. 

[File 813] PR Newswire 1 987- 1 999/Apr 30 

(c) 1999 PR Newswire Association Inc. All rights reserved. 

[File 634] San Jose Mercury Jun 1 985-2007/Feb 01 
(c) 2007 San Jose Mercury News. All rights reserved. 

[File 624] McGraw-Hill Publications 1 985-2007/Feb 05 
(c) 2007 McGraw-Hill Co. Inc. All rights reserved. 

*File 624: Homeland Security & Defense and 9 Piatt energy journals added Please see HELP NEWS624for more 

[File 9] Business & Industry(R) Jul/1994-2007/Feb 02 
(c) 2007 The Gale Group. All rights reserved. . 

[File 275] Gale Group Computer DB(TM) 1983-2007/Feb 01 
(c) 2007 The Gale Group. All rights reserved. 

[File 621] Gale Group New Prod.Annou.(R) 1985-2007/Jan 26 
(c) 2007 The Gale Group. All rights reserved. 

[File 636] Gale Group Newsletter DB(TM) 1987-2007/Feb 01 
(c) 2007 The Gale Group. All rights reserved. 

[File 16] Gale Group PROMT(R) 1990-2007/Feb 01 
(c) 2007 The Gale Group. All rights reserved. 



[File 160] Gale Group PROMT(R) 1972-1989 



(c) 1999 The Gale Group. All rights reserved. 

[File 148] Gale Group Trade & Industry DB 1976-2007/Jan 26 
(c)2007 The Gale Group. All rights reserved. 



2/3.K/1 (Item 1 from file: 275) Links 
Gale Group Computer DB(TM) 
(c) 2007 The Gale Group. All rights reserved. 
02163295 Supplier Number: 20506145 

Real-time monitoring simplifies debug.(Texas Instruments* Real-Time Data Exchange, for working with 
TMS320 DSPs)(Brief Article)(Product Announcement) 

Keil, Deborah; Szewerenko, Lee 

Electronic Engineering Times , nl003 , p92(l) 

April 20, 1998 

Document Type: Brief Article Product Announcement 
ISSN: 0192-1541 

Language: English Record Type: Citation 
Keil, Deborah... 



2/3.K/2 (Hem 2 from file: 275) Links 
Gale Group Computer DB(TM) 
(c) 2007 The Gale Group. All rights reserved. 
0 1 027732 Supplier Number: 00502493 
Saving Strings. 

Keil, D.M. 

80 Micro, n44, pi 16 
Sept. , 1983 
ISSN: 0744-7868 

Language: ENGLISH Record Type: ABSTRACT 
Keil, D.M. 



2/3,K/3 (Item 1 from file: 16) Links 

Gale Group PROMT(R) 

(c) 2007 The Gale Group. All rights reserved. 

05568340 Supplier Number: 48433261 (USE FORMAT 7 FOR FULLTEXT) 

Real-time monitoring simplifies debug 
Keil, Deborah; Szewerenko, Lee 
Electronic Engineering Times , p 92 
April 20, 1998 

Language: English Record Type: Fulltext 
Document Type: Magazine/Journal ; Trade 
Word Count: 564 
Keil, Deborah; Szewerenko, Lee 



2/3,K/4 (Item I from file: 148) Links 
Gale Group Trade & Industry DB 



(c)2007 The Gale Group. All rights reserved. 

10127267 Supplier Number: 20506145 (USE FORMAT 7 OR 9 FOR FULL TEXT ) 

Real-time monitoring simplifies debug.(Texas Instruments' Real-Time Data Exchange, for working with 

TMS320 DSPs)(Bricf Article)(Product Announcement) 

Keil, Deborah; Szewerenko, Lee 

Electronic Engineering Times , nl003 , p92(l) 

April 20, 1998 

Document Type: Brief Article Product Announcement 

ISSN: 0192-1541 

Language: English 

Record Type: Fulltext 

Word Count: 604 Line Count: 00052 

Keil, Deborah... 



Set Items Description 

SI OS AU=(KEIL D? OR KEIL, D? OR KEIL ( 2N) DEAN) 

; show files 

[File 256] TeclnfoSource 82-2007/Aug 

(c) 2007 Info. Sources Inc. All rights reserved. 

[File 625] American Banker Publications 1981-2007/Feb 05 
(c) 2007 American Banker. All rights reserved. 

[File 268] Banking Info Source 1981-2007/Jan W4 
(c) 2007 ProQuest Info&Learning. All rights reserved. 

[File 626] Bond Buyer Full Text 1981-2007/Feb 05 
(c) 2007 Bond Buyer. All rights reserved. 

[File 267] Finance & Banking Newsletters 2007/Feb 05 
(c) 2007 Dialog. All rights reserved. 

[File 608] KR/T Bus.News. 1992-2007/Feb 05 

(c)2007 Knight Ridder/Tribune Bus News. All rights reserved. 



Set Items " Description 

51 5218230 S COMPUTER? ? OR CPU? ? OR CENTRAL () PROCESSING OR PROCESSOR? ? OR SERVER? 
? OR MINICOMPUTER? ? OR MICROCOMPUTER? ? OR PC OR LAPTOP? ? OR HANDHELD? ? OR NOTEBOOK? ? 
OR COMPUTING OR MAINFRAME? ? OR MAIN ( ) (FRAME OR FRAMES) OR SYSTEM? ? OR SELF ( ) SERVIC? OR 
ATM OR ATMS. OR ((AUTOMATED OR AUTOMATIC) () (TELLER OR TRANSACTION OR SERVICE) OR CASH OR 
MONEY OR BANK) (W) (MACHINE? OR TERMINAL? ?) OR ELECTRONIC () TELLER? ? 

52 1866497 S VIRTUAL OR ONLINE OR ON () LINE OR INTERNET OR NET OR WEB OR WWW OR CYBER 
OR ELECTRONIC OR WEBSITE? OR WEBPAGE? OR WEB ( ) (SITE? OR SERVER? ?) 

53 103692 ANONYM? OR INCOG? OR -PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN OR ?NO?(2N) (PERSONAL OR USER) FROM 350, 347 

54 17934 S S3(5N) (DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR 
IDENTIFICATION OR NAME? ? OR ID) 

55 1013287 S PASSWORD OR PIN OR PERSONAL ( ) (IDENTIFICATION OR ID) () NUMBER OR CODE OR 
KEY OR (PASS OR SECRET) () (WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER 
OR (SECURITY OR ACCESS) () (CODE? ? OR KEY? ?) OR USER ( ) (ID OR IDENTIFICATION OR NAME) 

56 73809 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED) () (IN OR 
ON) OR AUTHENT I CAT ? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING OR 

DISTINCTIVE) (10N) (INFORMATION OR DATA OR STATISTIC? ? OR NUMBER? ?) 

57 5 041934 S PATRON? ? OR CUSTOMER? ? OR CLIENT? ? OR USER? ? OR SUBSCRIBER? ? OR 
ENROLEE? ? OR PARTICIPANT? ? OR PARTICIPAT?R? ? OR PERSON? ? OR DRIVER? ? OR OPERATOR? ? 
(5N) GENERAT? ? ? OR ACCOMPLISH? OR BRING () ABOUT OR CREATE? OR FORM? ? OR INITIAT? 

58 2 502 986 S TRANSACTION? ? OR ORDER? ? OR PROCEDURE? ? OR INTERACTION? ? OR DEALING 
? OR ACTION? ? OR TRADE? ? OR TRADING OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? O 
SALE? ? OR BUY??? 
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108 
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1391 


s 


S28 (5N) SI 


S30 
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371 
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104 
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6313 
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S40 


379 
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179 
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OR SECRET OR UNDISCLOSE? OR UNIQUE OR 
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? OR INTERACTION? ? OR ACTION? ? OR 



? OR INFORMATION OR NUMBER? ? OR 



543 5790 S S35(3N)S5 

544 230 * S S43 (3N) S31 

545 157 S S44 (S) SI 

546 86 S S44 (ION) SI 

547 115 S S45(5N)S1 

548 46 S S47 AND IC=G06F- 017/60 

S4 9 46 S S44 AND AU= (KEIL D? OR KEIL, D? OR KEIL ( 2N) DEAN) 

S50 46 ID PAT (primary/non-duplicate records only) 



; show files 

[File 350] Derwent WPIX 1963-2006/UD=200709 
(c) 2007 The Thomson Corporation. All rights reserved. 

*File 350: DWPl has been enhanced to extend content and functionality of the database. For more info, visit 
http://www. dialog, com/dwpi/. 

[File 347] JAPIO Dec 1976-2006/Oct(Updated 070201) 
(c) 2007 JPO & JAPIO. All rights reserved. 



t s50/ti, td, ta, au, iv/all 
>>>W: Some display codes not found in file 347: TD TA IV 

50/TI,TDTA,AU,IV/l (Item 1 from file: 350) Links 
Derwent WPIX 

(c) 2007 The Thomson Corporation. All rights reserved. 
0014742483 

WP1 Acc no: 2005-090109/ 

Credit card transaction system for travel agent, has verifier to compare stored code derived by decrypting 
digital signature with unique code obtained from transaction data and human identifier for verifying 
transaction 
Original Titles: 

Methods and apparatus for generating secure endorsed transactions 
Inventor: MOVALLI B; MOVALL1 M 



Alerting Abstract US A 1 

NOVELTY - The system has an encoder to generate a unique code from an input data comprising transaction data 
and a human identifier. A processor encrypts the code using keys of an asymmetrical key pair to output a signature. 
A formatter formats a secure endorsed transaction using the signature and the input data. A verifier compares a 
stored code derived by decrypting the digital signature with the unique code to verify the transaction. 
DESCRIPTION - An INDEPENDENT CLAIM is also included for a method for processing secure endorsed 
transactions. 

USE - Used for credit card transaction, in which credit card is utilized for paying for goods and services e.g. food at 
grocery store, clothes at department store, gas at gasoline station, airline tickets at travel agent, automobile at car 
dealer. 

ADVANTAGE - The verifier compares a stored code derived by decrypting the digital signature with the unique 
code to verify the transaction, thus providing a forge-resistant, tamper-resistant secure endorsed transactions. 
DESCRIPTION OF DRAWINGS - The drawing shows an operational flow chart of the procedure to verify the 
integrity of a secure endorsed transaction. 



Original Publication Data by Authority 



Inventor name & address: 

Movalli, Michael, Manchester, MA, US, Manchester, MA, US 
Movalli, Brian, Lowell, MA, US, Lowell, MA, US 



50A'l,TD,TA,AU,IV/2 (Item 2 from file: 350) Links 
Derwent WPIX 

(c) 2007 The Thomson Corporation. All rights reserved. 



0014685633 



WPI Acc no: 2005-033221/ 

Electronic transaction system, has card functioning on basis of pre-coding by secret number e.g. personal 
identification number, generated electronically with two magnetic strips 

Inventor: PIAM S 

Alerting Abstract FR A 1 

NOVELTY - The system has a card functioning on a basis of pre-coding by a -secret number e.g. personal 
identification number, generated electronically with two magnetic strips for assuring anonymity of user in an 
electronic transaction on an Internet. The secret number is printed in the card and stored in a central server of an 
enterprise. 

USE - Used for electronic transaction by a credit card, payment card and bank card on Internet. 
ADVANTAGE - The system assures secured transaction on the Internet, thus avoids the risk of piracy of the credit 
card and bank card. The secret code is stored in the central server such that the card cannot be used by others, 
therefore the user need not worry about losing his card. 

Original Publication Data by Authority 



Inventor name & address: 
P1AMS 5 



50/TI,TD,TA,AU,IV/3 (Item 3 from file: 350) Links 
Derwent WP1X 

(c) 2007 The Thomson Corporation. All rights reserved. 
0014649877 

WPI Acc no: 2004-831896/ 

Merchants information providing system for use in financial transaction network, has computer system 
combining similar identified merchants to form ranked set, and communicating few merchants of set to user 
information 
Original Titles: 

Use of financial transaction network(s) information to generate personalized recommendations 

USE OF FINANCIAL TRANSACTION NETWORK(S) INFORMATION TO GENERATE PERSONALIZED 

RECOMMENDATIONS 

UTILISATION ^INFORMATION DE RESEAU(X) DE TRANSACTIONS FINANCIERES POUR 
^ELABORATION DE RECOMMANDATIONS PERSONNAL1SEES 
Inventor: ANDRE O 



Alerting Abstract US A 1 

NOVELTY - The system has a computer system (10) for identifying a set of merchants from a set of information . 
selected from a group consisting of a subset of the user's payment tools transactions history, a subset of the user's 



I 



accounts transactions history, an input of reference merchants by the user. The system combines similar identified 
merchants to form a ranked set, and communicating few merchants of the set to user information. 
USE - Used in a financial transaction network for providing information e.g. unique merchant identification code, on 
merchants to users of the network. 

ADVANTAGE - The method facilitates the financial transaction network to automatically deepens its relationship 
with its user's and its affiliated merchants, and hence creating a virtuous circle in favor of the use of the payment 
tool. 

DESCRIPTION OF DRAWINGS - The drawing shows an illustration of the overall description of an 

implementation of a recommendation service that operates in merchants information providing system, and 

represents the flows of information between the components of the system. 

10 Computer system 

30 Merchants information table 

50 Web server 

60 Customer service server 

70 Customer service equipment 
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Purchase transaction authorizing method for purchase transaction payment system, involves authorizing 
transaction when received confirmation code corresponds to unique transaction identification code 
Original Titles: 

System facilitating a purchase transaction over a wireless network 
Inventor: TANABIAN M M; ZAHIR AZAMI B S 



Alerting Abstract US A 1 

NOVELTY - The method involves producing a unique transaction identification code (TID) (125), upon reception 
of a selection request. The transaction code is encrypted by a pseudo random number generator, and a confirmation 
code is received from a service center (170). A transaction is authorized when the received confirmation code 
corresponds to the unique transaction identification code. 

DESCRIPTION - An INDEPENDENT CLAIM is also included for a method for completion of a purchase 
transaction over a wireless network. 



USE - Used for authorizing purchase transaction (claimed) in a purchase transaction payment system that is utilized 
for transactions with a vending machine, video rental, coffee machine, fast food, cinema, sport facility, laundry, 
copy machine, fax machine, Internet node, automatic photo taking machine, gas station, carwash, toll highway, bus, 
tramway and metro ticket seller, taxi payment, game consul, public washroom, change machine, and relaxation, 
massage and oxygen machine, over a wireless network. 

ADVANTAGE - The method provides transaction to be completed or fulfilled without need for an explicit 
permanent network connection or network connectivity at the vendor site. 

DESCRIPTION OF DRAWINGS - DESCRIPTION OF DRAWING - The drawing shows a block diagram 
illustrating preferred network layers of a data exchange methodology. 
1 25 Unique transaction identification code 
1 10 Vendor station 
140 User 

1 50 Mobile device 
1 70 Service center 
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Secure endorsed transaction system in grocery store, verifies integrity of secure endorsed transaction by 
comparing unique code derived from input data, with new code generated with endorsed transaction 
Original Titles: 

Method and apparatus for generating secure endorsed transactions 
Inventor: MOVALLI B; MOVALLI M 



Alerting Abstract US Bl 

NOVELTY - An encoder generates unique code from input data including transaction data, identifier and two keys. 
A processor generates digital signature by encrypting unique code. A formatter formats secure endorsed transaction 
using digital signature and input data. Integrity of transaction is verified, by comparing unique code derived by 
decrypting digital signature, with a new code generated with endorsed transaction. 

USE - Secure endorsed transaction system for point-of-sale equipment used in grocery store, department store, 
gasoline station and also used by travel agent and car dealer. 

ADVANTAGE - Enables to generate secured endorsed transaction having transaction data and identifiers 



corresponding to parties endorsing the transactions. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the secure endorsed transaction system. 
100 secure endorsed transaction system 

Original Publication Data by Authority 



Inventor name & address: 

Movalli, Michael, Manchester, MA, US, Manchester, MA, US 
Movalli, Brian, Lowell, MA, US, Lowell, MA, US 



50/TI,TD,TA,AU JV/6 (Item 6 from file: 350) Links 
Derwent WPIX 

(c) 2007 The Thomson Corporation. All rights reserved. 
0014236966 

WPI Acc no: 2004-422946/ 

Apparatus for verification of transaction to be effected by card holder, allows or refuses transaction based on 
comparison result of stored unique codes and codes entered by card holder at card reading machine 
Original Titles: 

Transaction verification 
Inventor: HOWELL D W 



Alerting Abstract GB A 

NOVELTY - A server stores a list of transaction numbers for each card holder and corresponding unique codes. The 
card holder enters transaction number and unique code stored in a data carrier held by him to sale card reading 
machine which is communicably coupled to server, while effecting transaction at machine. The server compares 
entered and stored codes, and allows or refuses transaction based on comparison result. 
DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 



1 . method for verification of transaction; and 

2. data carrier for verification of transaction. 

USE - Apparatus for verification of transaction to be effected by holder of authentication card e.g. debit card and 
credit card, 

ADVANTAGE - Prevents fraudulent use of the authentication card, easily. 

DESCRIPTION OF DRAWINGS - The figure shows the flowchart explaining the transaction verification process. 
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Method for approving credit card transaction by using interactive character message 

Inventor: KIM J Y 



Alerting Abstract KR A 

NOVELTY - A credit card transaction approval method is provided to enable a credit card member to check a credit 
card transaction via a mobile terminal so that it can prevent others from using the member's credit card though the 
credit card number is exposed or hacked. 

DESCRIPTION - The method comprises several steps. A customer inputs credit card data, a mobile phone number 
and a secret number at an online shop for paying a commodity or a service with a credit card(l). The online shop 
transmits the input data to a payment gateway(2). The payment gateway transmits a transaction confirmation request 
message, including a callback URL, to the mobile phone by using the transmitted mobile phone number(3). The 
customer transmits the transaction confirmation message and the secret number to the payment gateway by using the 
callback URL(4). The payment gateway compares the secret number, transmitted by the online store, with that, 
transmitted by the customer, and if the two secret numbers are identical, transmits a transaction approval request to a 
credit card company(5). A server of the credit card company checks a credit state of the customer, and transmits an 
approval result to the payment gateway(6). The payment gateway transmits the approval result to the online store(7). 
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Online/real-time editing method for cellular telephone, involves searching order data file and displaying 
searched file to user for editing and forwarding to buyer 
Original Titles: 

Method and system for online and feal-time editing and forwarding manifestsza 
Inventor: CHI EN S; CHU T; LEE Y;WUK 



Alerting Abstract US Al 

NOVELTY - An order data file (32) is searched in the database server through a searching module (42) based on the 
input identification code of order file. The searched file is displayed to the user through the terminal (2) for online 
and real-time editing. The edited file is forwarded to the buyer who makes purchase order, based on the edited data.. 
DESCRIPTION - An INDEPENDENT CLAIM is also included for system for online/real-time editing and 
forwarding of data. 

USE - For online and real-time editing of order data file using cellular phones and desktop personal computer. 

ADVANTAGE - Transaction cost is reduced and market situation is controlled in real-time. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of online/real-time editing process. 

2 terminal 

32 order data file 

42 searching module 

44 editing module 

46 delivery module 
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Electronic payroll and work management system for labor intensive industries, compares employee account 
and personal identification numbers with prestored numbers, to authenticate employee for providing check 
in/out status 
Original Titles: 



Multi-purpose terminal, payroll and work management system and related methods 
Multi-purpose terminal, payroll and work management system and related methods 
Inventor: BEN-AISSAN 



Alerting Abstract US A 1 

NOVELTY - A computer in communication with automatic teller machine (ATM)-payroll and work management 
(APW) terminal (20), compares unique identification (ID) account number and personal ID number read by terminal 
from APW card (23), with number prestored in memory. When the numbers corresponds, the employee account 
number is authenticated and provides current time as payroll check-in/check-out status of respective employee. 
DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

3. electronic payroll processing method; and 

4. ATM-payroll-work management electronic terminal. 

USE -.Automatic teller machine-payroll-work management (APW) system for labor-intensive industries such as 
janitorial services and fast food franchises. 

ADVANTAGE - The employee payrolls are processed within short time period, thereby paying the employees 
immediately. Also minimizes the payroll frauds and expense. 

DESCRIPTION OF DRAWINGS - The figure shows a top plan view of the APW electronic payroll system. 

20 APW terminal 

21 display screen 

22 slot 

23 APW card 
30-34 keys 
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Check transaction processing system for grocery store, retrieves customer record storing check verification 
status information, from database using customer identification code in response to request from transaction 
terminal 



Original Titles: 

SYSTEM, METHOD, AND DATABASE FOR PROCESSING TRANSACTIONS 
Inventor: DEATON D W 



Alerting Abstract US Al 

NOVELTY - The system has a transaction terminal connected to a transaction processor which maintains customer 
information including check verification status in a database. The processor retrieves the customer record from the 
database using a customer identification code (ID), in response to the customer request received from the terminals. 
An appropriate response is transmitted based on retrieved record or lack of customer record. 
DESCRIPTION - An INDEPENDENT CLAIM is also included for check verification method. 
USE - For processing transactions of multiple-store business e.g. grocery stores. 

ADVANTAGE - The store's marketing and other customer relation programs are improved by maintaining the 
transaction data and customer profiles: The customer information is collected in an unobtrusive and efficient manner 
during high volume check transactions. 

DESCRIPTION OF DRAWINGS - The figure shows a flowchart illustrating the check verification method. 
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Alerting Abstract KR A 

NOVELTY - A unified electronic payment system is provided to secure a safe transaction between a purchaser and a 
seller though not using stores affiliated at a conventional credit card company. 

DESCRIPTION - The system comprises several steps. A seller or a purchaser accesses a credit card host system, and 
requests the host system to open a virtual affiliated store(slOO). The host system allows the virtual affiliated store to 
be opened(sl 10). The purchaser makes payment for a commodity at the virtual affiliated store by using a credit 
card(sl20). The host system notifies the purchaser or the seller of the opening of the virtual affiliated store, then the 
purchaser or the seller notifies the other side of the opening of the virtual affiliated store, and the purchaser 
transmits the credit number and the secret number to the host system. The host system processes the credit card 
payment by using the credit card number and the secret number, and transmits the process result to the purchaser 



and the seller(s!30). 
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Software license management system, verifies purchaser's unique identification code and secret key using 
software license information in server before transmitting software 
Original Titles: 

SOFTWARE LICENSE MANAGEMENT SYSTEM 
Inventor: ANEGAWA T; ISHIDAIRA I 



Alerting Abstract JP A 

NOVELTY - A software database (6) and a license management database (7) in a server (2) register the software for 

marketing and software license information of each software purchaser respectively. The server transmits the 

software to any of the purchaser terminals (3a-3c) through a communication circuit (1) after verifying purchaser's 

unique ID code and secret key using the software license information. 

USE - For managing software license through communication circuit such as Internet. 

ADVANTAGE - Since the information are transmitted after authenticating the purchaser, the software being 

irregularly installed in personal computers other than the software purchaser is prevented efficiently. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the software license management system. 

(Drawing includes non-English language text). 

1 communication circuit 

2server 

3a-3cpurchase terminals 

6software database 

71icense management database 
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System and method for making payment by using bank account of payment postponement 

Inventor: RA B H 



Alerting Abstract KR A 

NOVELTY - A payment system and method is provided to enable a buyer to place a purchase order and at the same 
time, make payment by using a transfer from a buyer's account to a seller's account, a payment postponement 
account from which the seller can not withdraw a money for a period so that it makes it easy for the buyer to request 
a repayment, a settlement or a payment suspension in a case that a delivered commodity or a service is abnormal. 
DESCRIPTION -The method comprises steps of a buyer searching for a desired commodity in an electronic 
commerce site, transmitting a purchase order for a searched commodity to the electronic commerce site, and making 
payment for the purchased commodity(401), the site displaying order specifications and offering a web window for 
enabling the buyer to input the buyer data, delivery destination data and a payment method(402), a buyer terminal 
transmitting the buyer data, the destination data and seller data to an account payment server if the buyer selects an 
account payment method(403), the account payment server extracting the name of the site and an account number, 
and transmitting a web page for inputting a buyer ID and an account secret number to the buyer terminal(404), the 
buyer inputting the buyer ID and the account secret number on the web page, and the account payment server 
checking a balance of the account(405), the account payment server transferring the purchase price from the buyer 
account to the electronic commerce site account which is a payment postponement account(406), the account 
payment server transmitting an account transfer process result to the buyer terminal(407), the account payment 
server transmitting ordered data to the site(408), the buyer requesting a repayment to the account payment server if 
a delivered commodity is abnormal(410), the account payment server requesting detailed data to the site(41 1), the 
site transmitting the requested detailed data to the account payment server(412), the account payment server taking 
a repayment, a settlement or a payment suspension based on the collected data(4I3), and the account payment 
server transmitting a taken action to the buyer via an e-mail(414). 
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Credit transaction system using bar code 

Inventor: KIM J H; KIM K J; LEE S D; SOHN J H 



Alerting Abstract KR A 

NOVELTY - A credit transaction system is provided to register at a portable terminal a bar code with conventional 
credit card data and a secret number, and to display the bar code on the portable terminal according to a request of a 
user when the user wants to purchase a commodity or a service. 

DESCRIPTION - The system comprises a portable terminal(200) and a financial institute. The portable 
terminal(200) includes a data input unit(201), a bar code storage(202), a secret number storage(203), a 
display(204) ? a cable connector(205) and a CPU(206). The data input module(201) enables a user to input a secret 
number, a bank name and an account number. The bar code storage(202) stores a bar code issued for the user. The 
secret number storage(203) stores secret numbers corresponding to bar codes. The display(204) displays the bar 
code according to a request of the user. The cable connector(205) connects the portable terminal to a server of a 
bank for downloading a new bar code. The CPU(206) controls the bar code storage operation of the bar code 
storage(202), analyzes the input data, i.e. a bank name and a secret number, extracts the bar code from the bar code 
storage(202) based on the analysis result, and controls the display of the extracted bar code. If a user wants to 
receive a new bar code from a bank, the user visits the bank, fills in an application form, and offers a portable 
terminal to the bank. Then the bank checks a credit state of the user and determines an issue of the bar code 
according to the credit state. If the credit state of the user is normal, the bank downloads the bar code to the portable 
terminal via the cable connector(205). 
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User authentication system for Internet-based financial transactions, compares unique user identification 
information stored in CD with input password of user, for authenticating user 
Original Titles: 

System, process and article for conducting authenticated transactions 
Inventor: F1SHMAN J M; POWERS L 



Alerting Abstract US A 1 

NOVELTY - A server (30) receives the unique user identification information stored in a CD (1 1) and a password 
input by a user. The server authenticates the user for transaction, when the stored information matches with the input 
password. 

DESCRIPTION - INDEPENDENT CLAIMS are included for the following: 

5. User authentication method; and 

6. Wallet-sized optical storage medium storing user authentication program. 
USE - For authenticating user in Internet-based financial transactions. 

ADVANTAGE - Since the user is authenticated only after matching the password with the information stored in the 
CD, additional level of security is provided. 

DESCRIPTION OF DRAWINGS - The figure shows a schematic view of the user authentication system. 
1 1 CD 
30 Server 
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Commercial transaction using prepayment card over the Internet, uses personal computer or mobile phone, 
certification center validates data contained on prepayment card 



Alerting Abstract FR Al 

NOVELTY - Method has stages as follows: 



A. establish connection between the sale site and certification center; collect and send number series and associated 
secret code to certification center; verify validity of number and code; verify credit on prepaid card; send 
payment authorization from certification center to sale site if verification of code and credit is positive; notify 
user of purchase validation. 

DESCRIPTION - Uses prepaid card having number series and associated secret code, to purchase service or object 
from sale site to which user has access via at least a partially public network. In second stage the connection to 
certification center is done automatically as son as the user selects the payment mode by prepaid card. The number 
series is composed of at least 10 alphanumeric characters and the secret code has at least 16 alphanumeric 
characters. In the first and last stages the data is transmitted in encrypted format. The user can access the sale site via 
a mobile phone via the certification center. The second stage is repeated a predetermined number of times in case of 
negative verification of number and code. An Independent Claim is also included for a prepaid card payment system 

USE - For making purchases over the Internet using prepayment cards. 

ADVANTAGE - Simple system which allows a user to makes remote purchase, even for small cost amounts/and 
guaranteeing risk limitation in case of fraud and complete confidentiality at moment of payment. 
DESCRIPTION OF DRAWINGS - The drawing illustrates a global view of the system 

2 personal computer 

3 mobile phone 

4 data processing and storage center 

5 server 

7 banks server 

41 prepayment cards authentication and management server 

42 database 
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Action verification method e.g. for financial transaction in bank, involves comparing PIN and individual 
accounts included in verification request, with corresponding stored information, to verify requested action 
Original Titles: 

Action verification system using central verification authority 
Action verification system using central verification authority 
Inventor: TALKER A I 



Alerting Abstract US Al 

NOVELTY - The prestored personal identification numbers (PINs) and the accounts of individual or organization 
(14) are compared with corresponding information included in a verification request (22), requesting a verification 
of the action. The action is verified when the identification number and the accounts match, and the verification 
result (23) is transmitted to the requesting party (12). 

DESCRIPTION - An INDEPENDENT CLAIM is included for personal identity verification method. 
USE - For verifying actions such as financial transaction, message, command, non-financial transaction, approval, 
identification request, data transmission, etc., for protecting against credit card and cheque frauds in bank, etc. 
ADVANTAGE - By verifying the actions, unauthorized actions are prevented, thus provides safe communication 
through unprotected communication lines. 

DESCRIPTION OF DRAWINGS - The figure shows a schematic block diagram of the action verification system. 
12 Requesting party 
14 Organization 

22 Verification request / 

23 Verification result 
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Display implementation method for on-line electronic trading exchange, involves identifying all offers to sell 
according to trading relationship between two member accounts 
Original Titles: 

Trading system with anonymous rating of participants 
Inventor: N1COLAISEN R A; TORMEY B P 



Alerting Abstract US Al 

NOVELTY - The default payment terms and the trading relationship between two member accounts are defined. An 
electronic trading exchange that includes at least one offer to sell is selected. A table is viewed and all offers to sell 
are identified according to the trading relationship. 

DESCRIPTION - INDEPENDENT CLAIMS are included for the following: 



7, Data analysis and dissemination provision method; and 

8. Computer system. 



USE - For implementing display for on-line electronic trading exchange. 

ADVANTAGE - Maintains the secrecy of identities of both the buyers and sellers and helps to preserve the integrity 
of the trading environment. 

DESCRIPTION OF DRAWINGS - The figure shows a flowchart illustrating the operation for the accumulation and 
display of data on an electronic trading exchange. 
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Integrated circuit card issue method for online transactions, involves collecting secret key and electronic 
certificate data based on received issue request and accordingly card is published and dispatched 
Original Titles: 

METHOD AND SYSTEM FOR ISSUING AND DISTRIBUTING IC CARD USED BY PKI SYSTEM 
Inventor: ON1SH1 I I 



Alerting Abstract JP A 

NOVELTY - A card issue request is forwarded to IC card issue terminal (30) based on the received purchase order 
request. The secret key and electronic certificate information generated by authentication system are collected by 
the issue terminal. Based on the collected information, the card is published and dispatched to relevant user through 
dispatch terminal (40). 

DESCRIPTION - INDEPENDENT CLAIMS are included for the following: 

9. IC card circulation method; 

10. IC card; and 

1 1 . IC card circulation system. 

USE - For issue of IC card used in online transactions through internet. 



ADVANTAGE - Simplifies IC card issuing due to sequential operation of service terminals with relevant data 
security. 

DESCRIPTION OF DRAWINGS - The figure shows an outline of IC card issue system. (Drawing includes 
non-English language text). 
30 IC card issue terminal 
40 Dispatch terminal 
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Managing accounts on Internet server by using unique identification code for account access data 
Original Titles: 

NETWORK ORIENTED PAYMENT SERVICE 
SYSTEM E DE PA1EMENT ORIENTS RESEAU 
Inventor: MARCOVICI M 
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NOVELTY - Method consists in sending a request to the server, establishing the account access data, assigning an 
amount to the accounts and transmitting the access data from the server to the requesting party over the Internet. A 
ticket is issued with the account access data which includes an activation time and a debit access code that is 
verified in transactions for account debiting. 

DESCRIPTION - There is an INDEPENDENT CLAIM for an Internet accounts management server. 
USE - Method is for managing accounts on an Internet server. 

ADVANTAGE - Method avoids transaction fees, ensures anonymity and enables transactions to be traced back to 
the benefiting person or organization, 

DESCRIPTION OF DRAWINGS - The figure shows a payment transacted between two tickets. 
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Purchase information grasp system has analysis section to analyze purchase information based on unique bar 
code information along with concerned purchaser information stored in data file 
Original Titles: 

PURCHASE COMPREHENDING SYSTEM AND PURCHASE COMPREHENDING METHOD 
Inventor: KAGOSHIMA H; NATOR1 H; ONUMA K; SHINTO T; TSUCH1DA 1 



Alerting Abstract JP A 

NOVELTY - A receiver (34) receives the unique bar code information with concerned purchaser information. A 
data file (33) stores the information received from the receiver. An analysis section analyze the purchase 
information, based on unique bar code information with concerned purchaser information stored in the data file. 
DESCRIPTION - An INDEPENDENT CLAIM is included for purchase information grasp method. 
USE - For grasping purchase information on consumer's goods to concerned goods. 

ADVANTAGE - Enables confirming purchase situation of goods easily, thus versatility is improved sufficiently. 
DESCRIPTION OF DRAWINGS - The figure shows a block diagram of purchase information grasp system. 
(Drawing includes non-English language text). 

33 Data file 

34 Receiver 
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Biometric data collection and transmission apparatus has biomctric template generator which is connected to 
sensor, to convert biometric data into biometric template 
Original Titles: 

VERFAHREN UND VORRICHTUNG ZUM SICHEREN UBERTRAGEN UND AUTHENTISIEREN 
BIOMETRISCHER DA TEN UBER E1N NETZWERK 

METHOD AND APPARATUS FOR SECURELY TRANSMITTING AND AUTHENTICATING BIOMETRIC 
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BIOMETRIQUES VIA UN RESEAU 

Method and apparatus for securely transmitting and authenticating biometric data over a network 

METHOD AND APPARATUS FOR SECURELY TRANSMITTING AND AUTHENTICATING BIOMETRIC 

DATA OVER A NETWORK 

PROCEDE ET APPAREIL REMISSION ET D'AUTHENTIFICATION SECURISEES DE DONNEES 
BIOMETRIQUES VIA UN RESEAU 
Inventor: GLASS R W 



Alerting Abstract US Al 

NOVELTY - A sensor connected to a biometric template generator (105) collects biometric data. An image 
processor (104) connected between the sensor and the biometric template generator determines whether biometric 
data is suitable for template generation. The biometric template generator converts the biometric data into biometric 
template (105a). 

DESCRIPTION - INDEPENDENT CLAIMS are included for the following: 



12. Cryptographic system; 

13. Security providing method; and 

14. Biometric information exchanging method. 

USE - For collecting and transmitting biometric data used for verification of individual identity in iris system and 
fingerprint system used for online banking and Internet commerce transaction. 

ADVANTAGE - The token defines a unique transaction and couples biometric data to the transaction, thus 
preventing use of biometric data at a later time or setting a time limit when the data becomes invalid. The system 
provides secure transmission and subsequent authentication of biometric data. 



DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the biometric identification system. 

104 Image processor 

105 Biometric generator 
105a Biometric template 
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Goods purchase authentication system includes server to judge whether bar code data allocated for each 
goods is legitimate data 
Original Titles: 

PURCHASE CERTIFYING SYSTEM AND PURCHASE CERTIFYING METHOD 
Inventor: KAGOSHIMA H; NATORI H; SHIIO I; SHINTO T; TAMURA K 



Alerting Abstract JP A 

NOVELTY - A bar code reader (1) inputs the unique bar code data for each goods purchased by a client (2). A CPU 
(2 1 ) transmits the bar code data to a server (3) through a network (4) and a database (33) stores the bar code data. . 
The server judges whether the stored data is a legitimate data. 

DESCRIPTION - An INDEPENDENT CLAIM is included for goods purchase authentication method. 
USE - Goods purchase authentication system. 

ADVANTAGE - Versatility of the goods purchase authentication system is improved. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the goods purchase authentication 

system. (Drawing includes non-English language text). 

1 Bar code reader 

2Client 

3 Server 

4Network 

21 CPU 

33 Database 
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Credit guarantee method in electronic commerce, involves sending transaction proof request telegraph 
message including bill number to authentication server, when transaction completion message is received 
Original Titles: 

CREDIT GUARANTEE METHOD IN ELECTRONIC COMMERCIAL TRANSACTION, AND DEALING 
AUTHENTICATING SERVER, STORE SERVER, AND MEMBER MANAGING SERVER APPLYING THE 
SAME METHOD 

Method of credit guarantee in electronic commerce 
Inventor: KOBAYASHI T 



Alerting Abstract JP A 

NOVELTY - A transaction report telegraph message containing bill number, is received by authentication server 
(20c) from payment system connected to user (10). A store server (20b) connected to goods selling system, sends 
transaction proof request telegraph message including bill number to server (20c), when transaction is completed. 
The server (20c) compares and records the bill numbers in telegraph messages. 
DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

B. Transaction authentication server; 

C. Store server; 

D. Management server 

USE - In electronic commerce. 

ADVANTAGE - Since bill numbers from both the payment system and goods selling system are compared, forged 
transaction is prevented. 

DESCRIPTION OF DRAWINGS - The figure shows the schematic diagram of transmission and reception of 
information during electronic commerce. (Drawing includes non-English language text). 
10 User 

20b Store server 

20c Authentication server 
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Debit account establishing system for credit card transaction, sends unique personal identifier number 
corresponding to debit account number in readable format from server to customer, based on received funds 
Original Titles: 

System and method for debit account transactions 
Inventor: KEIL DS 



Alerting Abstract US Al 

NOVELTY - A transaction terminal initiates point of sale transaction to accept input funds to be deposited into debit 
account from a customer. The terminal transmits input value of funds to host server which in turn sends unique 
personal identifier number ( PIN) corresponding to debit account number in a readable format to the customer. 
DESCRIPTION - An INDEPENDENT CLAIM is also included for debit account establishment method. 
USE - For establishing debit account for credit card ATM, bank card, prepaid cards transaction. 
ADVANTAGE - Allows customer to establish debit accounts in easy and efficient manner, without providing 
personal identification data, thereby assuring anonymity of account. Since the system does not require the standard 
POS payment implements such as plastic card, smart card, etc., outlay of capital customer is minimized, and 
possibility of theft of card is eliminated. 

DESCRIPTION OF DRAWINGS - The figure shows the transaction and funds flow of debit account establishing 
system. 
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Debit account establishing apparatus for credit card transaction, sends receipt printed with personal 
identifier and debit account numbers to transaction terminal, depending on received funds from customer 
Original Titles: 

Apparatus for establishing debit accounts 
Inventor: KEIL D S 



Alerting Abstract US A I 

NOVELTY - A transaction terminal initiates point of sale (POS) transaction to accept an input value representing 



funds to be deposited into debit account, from a customer. The terminal transmits input value to host which in turn 
sends receipt printed with personal identifier number (PIN) and debit account number, to the customer. 
USE - For establishing debit account through point-of-sale (POS) terminal for credit card, bank card, ATM debit 
pre-paid cards transactions, etc. 

ADVANTAGE - Allows customers to establish debit accounts in easy and efficient manner, without providing 
personal identification data, thereby assuring anonymity of account. The system does not require standard POS 
payment implements such as plastic card, smart card, etc., outlay of capital of customer is minimized and possibility 
of theft of card is eliminated. 

DESCRIPTION OF DRAWINGS - The figure shows a block diagram of POS transaction terminal. 
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Electronic payment system on Internet for eliminating need to supply consumer card information to shopping 
mall by setting electronic payment engine with form-analyzing robot 
Original Titles: 

Electronic payment system on internet and method the same 

ELECTRONIC PAYMENT SYSTEM ON INTERNET AND METHOD THE SAME 
SYSTEM E DE PA1EMENT ELECTRONIQUE SUR LTNTERNET ET PROCEDE ASSOCIE 
Inventor: KIM G C; KIM K 



Alerting Abstract WO A 1 

NOVELTY - A client server (12) performs communications through the Internet (10) and includes an electronic 
payment program and an electronic payment engine (22) with a form-analyzing robot (23), while an electronic 
authentication engine (20) is connected to a financial company server (16). 

DESCRIPTION - The robot analyzes a form comprising a settlement screen downloaded on the client system and 
extracts a settled amount of money and fields required to be input through analysis. The authentication engine issues 
a secret number of an account code. 

AN INDEPENDENT CLAIM is included for an electronic payment method. 
USE - Making electronic payments on the Internet. 

ADVANTAGE - Improved security by preventing retailers obtaining customer card information. 
DESCRIPTION OF DRAWINGS - The drawing shows the system 
12 Client system 



22 Payment engine 

23 Form-analyzing robot 
20 Authentication engine 
1 6 Company server 
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Method for approving credit card transaction using bidirectional text message of wireless internet 

Inventor: KIM J Y 



Alerting Abstract KR A 

NOVELTY - A method for approving credit card transaction using a bidirectional text message of the wireless 
Internet is provided to prevent a credit card from piracy, by making the credit card transaction checked via a mobile 
communication terminal of a credit card owner in response to an identification request of a credit card company. 
DESCRIPTION - A credit card member registers a cellular phone number for receiving a text message in a server of 
a credit card company(S2IO). The credit card member suggests a credit card, and then requests an approval of the 
credit card to an approval relay company server in transaction(S220). The approval relay company server requests a 



transaction approval to a credit card company, and the credit card company sends an identification message of the 
transaction approval request(S230). The credit card member inputs a secret number into a server of the credit card 
company in order-to confirm the transaction(S240). The credit card company server checks the secret number 
from the credit card member, and sends resultant data of the transaction approval request to the approval relay 
company server(S250). 
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Method for automatically filling up order sheet using contents ordered by user 

Inventor: CHO S U; KIM J G; KONG G T; LEE J W 



Alerting Abstract KR A 

NOVELTY - A method for automatically filling up an order sheet using contents ordered by a user is provided to 
embody an order filling up method and a recording medium capable of being read by a computer recording a 
program for implementing the method for a later ordering and a convenience of related process by using an E-mail 
address and a secret number inputted at ordering of an internet shopping mall user in an internet electronic 
commercial transaction. 

DESCRIPTION - An internet electronic commercial transaction server is selected ordering information(name, 
E-mail address, telephone, address), delivery information(receiver and address of the receiver) and paying 
information(paying method, for example, non-bankbook depositing or a credit card) from an initial ordering user 
through an internet. Also, the internet electronic commercial transaction server receives a secret number capable 
of managing the user's account(201(similar)203) and stores the secret number in the database. As the ID, an E-mail 
address is used. In detail, the user selects a paying method(non-bankbook depositing or a credit card). If the user 
wants to pay by a non-bankbook depositing, the internet electronic commercial transaction server receives bank 
information to be deposited and a secret number. If the user wants to pay by a credit card, a secret number is 
inputted after a credit card is approved by receiving credit card information(203). 
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Enabling anonymous credit transactions for the purchase of good and services from merchants over e.g. the 

internet 

Original Titles: 

Systems and methods enabling anonymous credit transactions 
Systems and methods enabling anonymous credit transactions 

SYSTEMS AND METHODS ENABLING ANONYMOUS CREDIT TRANSACTIONS 

SYSTEMES ET PROCEDES PERMETTANT D'EFFECTUER DES TRANSACTIONS DE CREDIT ANONYM ES 
Inventor: BRODY R M; KENNEDY R S 



Alerting Abstract WO A2 

NOVELTY - Blocks of consumer credit card numbers are used to create dynamic mappings of the card numbers to 
account numbers or even other card numbers, e.g. pseudo-random credit card numbers. Because pseudo-random 
attributes are transmitted to the merchant; the transaction between the consumer and merchant will be anonymous. 
USE - Enables consumers to purchase goods and services from merchants, using credit cards. 
ADVANTAGE - Consumers can maintain the confidentiality of their credit card numbers and identity without 
disclosure to the merchants. 

DESCRIPTION OF DRAWINGS - The drawing shows a schematic diagram of the system employing the method. 
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Authenticating method of products for sale over Internet for manufacturers, involves communicating unique 
code associated with purchase product to authenticating server for determining authenticity of product 
Original Titles: 

SYSTEM UND VERFAHREN ZUM VERIFIZIEREN DER AUTHENTIZITAT VON PRODUKTEN MIT HILFE 
EINES NETZWERKS 

SYSTEM AND METHOD FOR VERIFYING AUTHENTICITY OF PRODUCTS USING NETWORKS 
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Alerting Abstract WO A2 

NOVELTY - A product with unique identification code is purchased over the network. On receipt of product, 
identification code of product is analyzed and communicated to authentication server (62) that determines whether 
a code is valid and whether product is authentic. This determined validity is communicated to the purchaser (58). 
DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

E. Sales transaction authenticating system; 

F. Database structure for use in authenticating identification indicia of products; 

G. Computer data transmission system; 

1-L Sales transaction monitoring/checking method 

USE - For verifying authenticity of goods purchased or offered for sale over network such as Internet. 
ADVANTAGE - Since identification code is provided for all products, the validity of purchased product is 
determined by communicating code of purchased product to authentication server, thus purchasers are enabled to, 
purchase the product with same level of security as in commercial exchanges. 

DESCRIPTION OF DRAWINGS - The figure shows system level diagram illustrating the network arrangement and 
use of such a network arrangement to authenticate goods purchased over the network. 
58 Purchaser 
62 Server 
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Authentication using a cellular phone on the Internet by performing authentication in parallel with accessing 
of the personal information stored when a user joins the service 
Original Titles: 
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Alerting Abstract WO A 1 

NOVELTY - A line securing high degree encryption and a security device is used between the authentication server 
(10) of the service company and the Internet site server (20) and a user (30) requests connection. The Internet server 
transmits authentication information input at the server and requests approval of authentication. The input 
authentication is compared with the stored information to determine if approval should be granted to the user or not. 
USE - Authenticating a cellular phone on the Internet. 

ADVANTAGE - Preventing danger of hacking and securing safety of electronic payments. 
DESCRIPTION OF DRAWINGS - The drawing illustrates the method 
10 Authentication server 
20 Internet site server 
30 User 
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Method for proving paying gateway in internet electronic wallet 
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Alerting Abstract KR A 

NOVELTY - The method for proving a paying gateway in an internet electronic wallet is provided for an internet 
commercial transaction buyers to identify a paying gateway system easily by inputtingpersonal secret data of 
internet commercial transaction buyers in a paying gateway system and rendering the paying gateway system to 
transmit the personal secret data and a characteristics picture seal information to a transaction purchase system. 
DESCRIPTION - The internet commercial transaction purchase system creates personal secret data and registers the 
data, a buyer ID and a secret number(ST31). If a purchase demand is transmitted from the internet commercial 
transaction purchase system, a paying gateway demands the buyer ID and a secret number(ST32). If the inputted 
buyer ID is pre-registered, pre-registered personal secret data and picture seal information are transmitted to a 
purchase system(ST33, ST34). If an electronic wallet server is executed and credit information is inputted by the 
buyer, the paying gateway requests a paying to a card system(ST35). If a paying result is transmitted from the card 
system, the paying result is transmitted to a selling system (ST36). The selling system decides as to whether a 
commodity delivery is permitted in accordance with the paying result(ST37). 
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Banking system and method using smart card 
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Alerting Abstract KR A 

NOVELTY - A banking system and a method using a smart card are provided to decode secure information, for 
example account data, by using a smart card so that it can assure a security of a user information over a public 
network. 

DESCRIPTION - The method comprises steps of issuing a banking card storing a user information, an account 
information, a secret code and.a secret key used in coding and host approval(SlOO), comparing a received user 
password with the information stored in the issued banking card(S200), generating a service selection and a service 
format via a client terminal, accessing a banking host, and generating an inter-approval and a coding format(S300), 
and performing a banking task through a bank computer system and a network by using the generated 
session(S400). The system comprises the smart card, the client terminal, the banking host, and the bank computer 
system. 
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Secured payment for goods purchased through Internet, involves sending purchaser's access code acquired 



from seller to host computer of credit card company which sends delivery information to seller's host 

computer 

Original Titles: 
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Alerting Abstract WO A 1 

NOVELTY - The purchaser inputs credit card and secret numbers and also access code to Internet card company. 
Host of credit card company sends purchaser's name and address to seller's computer, for delivery of goods after 
checking the credit. Seller's computer sends request for payment to credit card company after delivering goods, after 
which purchaser pays to the credit card company. 

DESCRIPTION - Purchaser chooses goods from the seller's homepage. The seller's host sends purchaser's access 
code to the purchaser. 

USE - For secured payment using credit card for goods, services and other information purchased or acquired 
through Internet. 

ADVANTAGE - Seller's host provides purchaser's access code for trade, so that purchaser's credit card secret 
number is secured. By using the purchaser's identification number, it is possible for the seller's host to write and data 
for specific purchaser and goods can be searched using temporary identification number. 
DESCRIPTION OF DRAWINGS - The figure shows flowchart of payment system using credit card. 
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Asset exchange system for facilitating sale of items, includes multi-item optimizer connected to processor 
which define sales criteria for accepting winning bids from buyers for multiple item listing 
Original Titles: 

SYSTEM AND METHOD FOR PROVIDING AN ELECTRONIC BUSINESS-TO-BUSINESS EXCHANGE FOR 
BUYERS AND SELLERS 

SYSTEME ET PROCEDE ASSURANT DES ECHANGES COMMERCIALS ELECTRONIQUES ENTRE 

ACHETEURS ET VENDEURS 

Inventor: BOYLE T R; MCCAGG B; SCHILLING P 
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NOVELTY - The processor (50) maintains addressable website and controls access to website via Internet by buyer 
and seller. Multiple sales modules connected to the processor, process sale information of several items as specified 
by seller. The multi-item optimizer connected to processor, defines sales criteria for accepting winning bids from 
buyers for multiple item listing. 

DESCRIPTION - The processor is configured to query the seller for preferred transaction type comprising 
first-come-first-served transaction type. The seller provides minimum acceptable bid or standard auction transaction 
type or highest sealed bid transaction type and item is sold to buyer that enters a bid equal to the minimum 
acceptable bid. An INDEPENDENT CLAIM is also included for method for facilitating sale of items via asset 
exchange system. 

USE - For providing electronic business-to-business exchange for buyers and sellers via Internet. Also for 
exchanging purchase orders, sales invoices insurance documents, shipping document payments etc. 
ADVANTAGE - Enables user to view and bid for listing available to private sale group, without requiring the user 
to qualify for private sales group by entering the account number or password. An anonymous remailer system is 
used to alter the buyer's and seller's e-mail addresses, thereby preventing the buyers and sellers from circumventing 
auction fees by arranging to conduct sale off-site. Regardless of type of transaction selected by seller, same data and 
same process are employed to determine winning price and winning quantity. Since the buyer's bid increases 
periodically, it enables buyer to obtain a lower price in event that the seller reduces her minimum acceptable bid 
price prior to buyer meeting it. The operator of surplus asset exchange system can monitor e-mail messages between 
sellers and buyers by copying the messages to website operator e-mail address. Unless the seller designates a private 
sales group, the listing is available to all potential buyers. 

DESCRIPTION OF DRAWINGS - The figure shows the diagram that illustrates the various components of surplus 
assets exchange system. 
50 Processor 



Technology Focus 
INDUSTRIAL STANDARDS 
over the Internet. 



- The XML/EDI refers to industrial standard for conducting commerce electronically 
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Financial payment system for on-line internet purchases, adjusts electronic account outstanding balance for 
input electronic account by monetary amount 
Original Titles: 

FINANCIAL PAYMENT METHOD AND MEDIUM 
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Inventor: BRADEN W; HSIEH P 
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NOVELTY - Account number, unique vault code, password and monetary account associated with the particular 
transaction are received and are compared with that stored in a database which stores electronic account, 
corresponding to the received account number. If a match exists, the electronic account outstanding balance for 
input electronic accounts is adjusted by the amount of monetary value. 

DESCRIPTION - Each account instrument is associated with a buyer and has an account number, unique vault code 
and associated password. A database computer is linked to a remote gateway computer, and stores several 
electronic accounts associated with several account instruments respectively. Each electronic account consists of 
data including account number, password and outstanding balance. An INDEPENDENT CLAIM is also included for 
financial payment method. 



USE - For making financial payments via electronic transactions such as on-line internet purchases, for internet 
based communications and ACH commerce, for consumer accounting or financial planning application. 
ADVANTAGE - Provides internet merchants with cheaper payment medium alternative to credit cards for 
acceptance of on-line payments. Provides seller and buyer a method for on-line commerce possessing the key 
attributes of cash and check while accommodating exigencies of multiple currency and languages. 
DESCRIPTION OF DRAWINGS - The figure shows the flow chart illustrating purchase transaction. 
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Gaming method for conducting game of chance in conjunction with regular sporting events e.g. football 
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NOVELTY - A number of sporting events e.g. baseball or football games are identified for play by participants 
during a given period of time, i.e. on a weekly basis. The winning series of numbers is determined after the 
identified games have been played to competition, including any extra time, or extra innings etc. The final value 
each team's scoring in the identified set is combined to provide a total numerical value. 
DESCRIPTION - INDEPENDENT CLAIMS are included for; an apparatus for conducting games of chance n 
conjunction with a number of sporting events. 

USE - Conducting games of chance in which large numbers of participants each pay a fee and select series of 
numbers in a prescribed range, with the winner being the participants whose numbers correspond to a series of 
randomly derived numbers. 

ADVANTAGE - Scores of one or more alternative like sporting events can be substituted in cases of events not 



being completed e.g. due to inclement weather. 

DESCRIPTION OF DRAWINGS - The drawing shows a flow chart depicting the steps of the invention. 



Original Publication Data by Authority 



Australia 

Publication No. AU 199919614 A (Update 199937 E) 
Publication Date: 19990503 
Assignee: SUPRA ENG LTD; IE(SUPR-N) 
Language: EN 

Application: AU 199919614 A 19981013 (Local application) 
Priority: US 1997950243 A 19971014 
US 199820128 A 19980206 

Related Publication: WO 1999019841 A (Based on OP1 patent) 

Original IPC: G07C-15/00(A) G06F-17/60(B) 

Current IPC: G07C-15/00(A) G06F-1 7/60(B) 

Inventor name & address: 

KAIL G, 

KAIL G, 

KAIL G, 

KAIL, Gianni, Via Moretta, 41, 1-10139 Torino, IT, 1-10139 Torino, IT 
KAIL G , 

Kail, Gianni, Turin, IT, IT 
Kail. Gianni, Turin, IT, IT 

KAIL, Gianni, Via Moretta, 41, 1-10139 Torino, IT, IT 



50/Tl,TD,TA,AU,IV/39 (Item 39 from file: 350) Links 
Derwent WPIX 

(c) 2007 The Thomson Corporation. All rights reserved. 
0009076265 

WPI Acc no: 1998-506943/ 

Method for executing secure online transaction between vendor and user computers - send transaction 
request to vendor computer with user identification data unique to user computer, vendor sends verification 
request to trust server which authenticates user to authorise transaction when authorisation has passed 
Original Titles: 
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PROCEDE ET SYSTEME DE TRAITEMENT PROTEGE DE TRANSACTION EN DIRECT 
Method and system for secure online transaction processing. 

METHOD AND SYSTEM FOR SECURE ONLINE TRANSACTION PROCESSING 
Inventor: SIXTUST 
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The method allows the user (12) computer to send a transaction request message to the vendor computer (14) via the 
computer network. The financial transaction request comprises user identification data unique to the user 
computer . In response to the receipt of the request the vendor computer sends a verification request to a trust 
server (1 8) computer interconnected to the computer network. 

The verification request has user identification data and data indicating the requested transaction. In response to 
receiving this request the trust server authenticates the user computer using the user identification data and 
communicates with the user computer for verification with the user identification data. The trust server authorises 
the transaction when the authentication has passed. 

USE - Relates to online electronic commerce and to secure methodology for approving online transaction carried out 
over Internet. 

ADVANTAGE - Authenticates identity and credit of purchaser without transmitting credit card number or other 
payment mechanism as part of online transaction. 
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Digital payment transaction system operating method e.g. for Internet - having broker generating and storing 
secret number and generating chain of hash values by successive operations of hash functions, using secret 
number as starting value with broker issuing too user, digitally encoded value 
Original Titles: 
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The method involves, at a first party, ("the broker") generating a secret number. The secret number is stored at the 
first party. A hash chain of values which are derived from the secret number by successive operations of a hash 
function are generated at the party. A digitally encoded value is communicated to a second party ("the user") from 
the chain of hash values. At the second party a second hash chain of values are generated which are derived fronvthe 
value communicated by the first party. 

Digitally encoded values are communicated from the second hash chain to a third party ("the vendor") in payment. 
A value is subsequently communicated to the second party from the first party in the hash chain which precedes the 
value originally communicated. : 

ADVANTAGE - Provides method of using coin stick between three parties. Increases flexibility in operation of 
transaction system, for use in on-line trading with multiplicity of vendors. 
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Satellite receiver method for on-line banking using IC card - involves adapting satellite receiver to act as 
banking terminal for modem connection to bank and performing banking services 
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The method using a TV tuner and electronics to provide a user with free, subscription or pay by view services. It 
contains an IC card reader and modem to handle subscription and pay per view controls. The receiver also has menu 
functions providing access to banking services. When the banking functions are selected, the receiver contacts a host 
computer by modem. 

It transmits the type of service required and PIN. The host then asks for the user secret code which can be entered 
and sent. A menu is then used to allow the user to operate various banking functions. This includes recharging the 
IC card or other transfer functions. 

ADVANTAGE - Allows the user to recharge an IC card from a convenient location rather than visiting a bank 



machine. 
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Electronics fund transfer system e.g automated teller machine - has input device which enables user to select 
custom transaction from customised menu for execution and control device executes selected transaction 
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The system includes a user identification cards unique to each user and having information stored which includes 
transaction information corresponding to custom transactions pre-defined by the user of the identification card. A 
user accessible transaction terminal which includes card reader device for reading information stored on the user 
identification card. 

A display device displays a user customised menu comprising one or more of the custom transactions based on 
information read from the user's identification card. An input device enables the user to select a custom transaction 
from the customised menu for execution. A control device executes a selected transaction. 

ADVANTAGE - Provides customised menu for individual user. Enables user-defined transaction to be completed 
with reduced number of inputs from user. 
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Alerting Abstract WO A2 

NOVELTY - Blocks of consumer credit card numbers are used to create dynamic mappings of the card numbers to 
account numbers or even other card numbers, e.g. pseudo-random credit card numbers. Because pseudo-random 
attributes are transmitted to the merchant; the transaction between the consumer and merchant will be anonymous. 
USE - Enables consumers to purchase goods and services from merchants, using credit cards. 
ADVANTAGE - Consumers can maintain the confidentiality of their credit card numbers and identity without 



disclosure to the merchants. 

DESCRIPTION OF DRAWINGS - The drawing shows a schematic diagram of the system employing the method. 
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Specification: ...transaction. In this case, unlike the credit-card transactions through the Internet, transmission of a 
secret number is not required. Thisis effective for protecting individual information, which has good influence on. 
users' psychology and promotes the expansion of the Internet sales. 

In any cases, the product itself is directly delivered to the user 14 in order to take advantages of the direct-selling 
system through the Internet. However, it is possible to make the delivery to the sales outlet where the user 
purchased the product or a specific convenience store, other than using the home delivery service to the user's 
house. 

If a credit-card is used, a check is performed by connecting to case of the second time or later, confirmation can 

be performed by the past order data (ID code and secret code is given at the time of first order)). 

As mentioned above, according to the present... 
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Specification: ...a user's secret identification code in a financial institution where the user has an account; means 
for sending the entered secret identification code, amount information, and user's account information to a 
computer system of the financial institution, so as to check whether a payment through account transfer... 

Claims: ...a user's secret identification code in a financial institution where the user has an account; 

means for sending the entered secret identification code, amount information, and user's account information to 
computer system of the 
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Detailed Description: 

...to access an electronic commerce site and purchase the commodity by using his transfer card number and secret 
number through his personal communication means 300 without using the transfer card 100 as described above... 
...the transfer card user to purchase the commodity by the entering of the transfer card number and the secret 
number . 

Accordingly, the electronic commerce site server 600 receives the data 

outputted from the personal communication means 300, provides information on the purchasing the commodity to 
the transfer card user, and outputs commodity purchase information. The financial settlement system 700 receives 
the commodity purchase information... site server 600 to process credit conditions according to the use of the 
transfer card number and the secret number, authenticates the credit conditions, and additionally outputs a control 
signal corresponding to the authenticated result. 

At... 



Claims: 

...financial settlement system, whether the transfer 

card user purchases a commodity using a transfer card number and a secret number 1 5 through a personal 
communication means, if the transfer card user does notpurchase... transfer card at step a);g) ending the alternative 
payment method, if the transfer card user doesnot purchase the commodity using the transfer card number and the 
secret number through the personal communication means, and receiving the alternative the2 0 payment limit 

information with the alternative payment limit information by the financial settlement system, if the transfer 

card user purchases the commodity using the 2 5 transfer card number and the secret number through the personal 
communicationmeans;h) performing second authentication for credit conditions of the transfer... 
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Detailed Description: 

...access an electronic commerce site 2 0 and purchase a commodity by using a barcode number and a secret 
number through his personal communication means 300 without using the barcode stored in the mobile 

communication so as to allow the Internet user to purchase a commodity by entering a barcode number and a 

secret number. 

2 5 Accordingly, the electronic commerce site server 600 receives the data outputted from the to the purchase of the 
commodity by the Internet user, and outputs commodity purchasing information related to payment. The financial 

settlement system 700 receives the commerce site server 600 to process credit conditions according to the use of 

the barcode number and the secret number, authenticates the credit conditions, and additionally outputs a control 
signal corresponding to the authenticated result. 

At... 



Claims: 

...comprising the steps of5 g) determining, by the financial settlement system, whether the Internet user purchases a 
commodity using a barcode number and a secret number through 

personal communication means, if the Internet user does not purchase acommodity. using the 0 h) ending the 
alternative payment method, if the Internet user does not purchase a commodity using a barcode number and a 
secret number through the personal communication means, and receiving alternative the payment limit information 

outputted from the information with secondcommodity purchasing price information by the Financial settlement 

system, if the Internet user purchases a commodity using the barcode number and the secret number through the 
personal communication means;i) performing 
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...outputied from the financial settlement system 1000. 

5 Meanwhile, if the Internet user desires to purchase a commodity using @L barcode number and a secret number 



without using the barcode stored in the mobile communication terminal 100, the Internet user accesses an electronic 
commerce site using a mouse (not shown) connected to the personal 

communication means 800 (for example, desktop computer, notebook computer, 0 etc.) used by the Internet user, 
selects a desired commodity, and enters a barcode number, a secret number and data required to purchase a 
commodity using a keyboard (not shown). 

The electronic commerce site server 900 then receives... database server 500. The member database server 500 
stores commodity purchasing information of the commodity purchased using the barcode number and the secret 
number of the Internet user. 

Further, the member database server 500 checks a commodity purchasing 

type of the Internet user. That is, the member database server 500 outputs a control signal corresponding to the 
commodity purchasing type according to 1 0 whether the Internet user uses the barcode of the mobile 
communication terminal 100 or whether the Internet user uses the barcode number and the secret number through 
the personal communication terminal 800. 

At this time, if the Internet user uses the ... 
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...found that even despite the built-in error checking and 
'correction facilities provided to the users of the system, a 

repetitive pattern of mistakes ...since the ECOOEXV1 program processing does not update Bill-To Customer 
information in the rental system database'files. (See 
©Improvement Opportunities number 3 below.) 

;.@ -ll 7 processing :an Extension, move an 'aEff to the Action Code in the AM055V1 external data structure. When 
a termination date has been sent, update the... 
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...the implementation of additional 
functionalities which are engendered by the browser/GUI 
interface. As the system is continuously used,, and feedback 
is continuously monitored and analyzed, additional features 
that add value through providing management information as 
well as by speeding transaction activity over the system may 
be implemented. For example, several of these features 

include the ability of a user... Read File EDPREF1 to retrieve the direct billing trading partner's 
RTs, NETWORK and SCRIPT information. 

- If no record is found a return code of 1 indicating nothing can be 
Dcessed. 

Dcess 

erarchical numeric ID: 1 1 2 
ded...File. 

-IF any new approved surcharges were generated, then read this file for 

s rental transaction to generate a new automatic pseudo-rental Authorization mge (AT) transaction set for 
approved surcharges to be routed to a distributed ital application system host platform... 
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...on the financial company server 1 6. Accordingly, if the client applies for issuance of the client account and secret 
number or the client card through the financial company server 16, the electronic authentication engine 20 issues a 
pertinent account code and a secret number... 
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...a decoding algorithm without keeping a separate encryption key in custody, and decodes the card information by 

using the received secret number (step 248). Thereafter, like the existing banking transaction systems of a 

portable terminal. For the time when a person tries to find out a secret number illegally, the possessor of the 
portable terminal reports the loss of the portable ten-ninal, and thus it is not possible to find out a settlement secret 
number without having an agreement of the portable terminal possessor, except for the time when an afterservice 
(A/S) is applied. Also, if the settlement secret number is altered and then A/S is committed, even in the case of the 

A the portable terminal is designed so that only one-time settlement is made and the secret number is again 

requested during reuse. In this case, the present invention can improve inconveniences greatly. ..commerce uses a 
settlement system requiring a user to input card information such as a user name, card number, secret number, 

and a valid date on a browser provided by a cyber shopping mall. The present products. Then, the customer 

determines purchase items and makes up an order sheet. Then, the customer selects a settlement method for 
settlement.of a debt on a screen and clicks the selected settlement method (step 591). The shopping mall system 584 
checks if the customer's selected settlement method is an optical payment settlement method (step 592). If the 

customer determines the payment by one of other settlement method other than the optical payment, a methods 

other than the optical payment. If a payment is an optical payment settlement, a customer uses a portable unit 581 

which is an optical payment unit and transmits the card optical payment unit has been described above, the 

detailed description thereof will be omitted. The customer inputs a secret number which is known only by him or 
her and presses a settlement button, and then. ..exit mode, the visitor manipulates a keypad on the portable terminal 
800 and inputs a secret number in response to a request for an input of the secret number (step 812... portable 
terminal 830A checks if the secret number is correct (step 902). If the secret, number is correct, the portable 

terminal 830A displays the screen asking a transfer object as shown can be embodied. In the case of a large 

amount of credit transaction requiring a secret number, a receiver receives a secret number and uses the same. 
Accordingly, there is no risk of leaking personal payment information. Also.. .exit security system requiring personal 
identification as well as the Financial transaction. In addition, a secret number and bio- identification data are 
combined when an in-person is identified in order to access payment information incorporated in a portable 
terminal. Thus, an... 



Claims: 

...optical payment transmitter of claim 46, further comprising a tone recognition module for recognizing the secret 
number from a tone signal generated in correspondenceto the secret number input via a keypad.. .information into the 



portable terminal together 

with a settlement secret number;(c) inputting the secret number into the portable terminal during performing - 1 14 
transactions and selecting a settlement mode;(d) transmitting both the card information and the secret number 
input into the portable terminal in the form of an optical signal, at the settlement mode; (e) receiving the card 
information and the secret number in the form of the optical signal and decoding the card information using the 
received secret number; and (0 performing a settlement operation with the decoded card information. 
74 The security enhancement... 
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...next sequential number and does not have to be, in 3 0 any way, a secret number. 



In step 1 10, the customer computer sends to the customer account server, the same information. This is a security 
procedure such that if the customer computer.. 
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Abstract: ...which is then modified (at no extra communication cost) into an identification scheme with secret key 
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Abstract: ...the scale of network technologies, security has become a major concern and a limiting factor. 
Computer networks provide convenient procedures for users operating at remote places. However, an intruder can 
easily access and intercept information transmitted in an open channel. Two integrated schemes for user 
authentication and access control are proposed, which are mechanisms used to provide for the protection of... 
...provides an efficient updating process for the modification of access rights. The second scheme allows servers to 
simplify verification processes for multiple access requests of a user at the same time. Both schemes are 



noninteractive approaches in which security is based on more secure and efficient and suitable for applications in 

a distributed environment. Intruders cannot derive secret information from public information. Intruders are not 
able to acquire the passwords of users from previously intercepted messages. By applying a time stamp, the schemes 
can' withstand the.replaying... 
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Abstract: Third generation mobile networks aim to offer ^any service, anywhere, at any time'. Users require privacy 
within these systems in order to feel confident of their use. Privacy requirements (in mobile networks) are: content, 
location and identification privacy, and authentication. Differing from previous approaches to privacy, the network 
itself is considered to be an untrusted party. The paper proposes a scheme that allows the user to register with the 
network and remain anonymous (both location and identification). Digital mixes are used to create anonymity and 
authentication is achieved through a token based scheme. Finally the aspect of information leaking to authorised... 
...is discussed and billing requirements are detailed which involve the use of ^coin' like tokens traded for services. 
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Abstract: A threshold scheme is a system that protects a secret (key) among a group of participants in such a way 
that it can only be reconstructed from the joint information held by some predetermined number of these 
participants. We extend this problem to one where there is more than one secret that participants can reconstruct 
using the information that they hold. In particular we consider the situation where there is a secret s/sub KJ 
associated with each k-subset K of participants and s/sub KJ can be reconstructed by any group of t participants in 
K (t<or=k). We establish bounds on the minimum amount of information that participants must hold in order to 
ensure that up to omega participants (0<or= omega <or=n-k+t-l) cannot obtain any information about a secret 
with which they are not associated. We also discuss examples of systems that satisfy this bound. 
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Abstract: The authors describe results from an apparatus and protocol designed to implement quantum key 
distribution, by which two users, who share no secret information initially: (1) exchange a random quantum 

transmission, consisting of very faint flashes of polarized light; (2) by subsequent small enough, distill from the 

sent and received versions a smaller body of shared random information, which is certifiably secret in the sense 
that any third party's expected information on it is an exponentially small fraction of one bit. Because the system 
depends on the uncertainty principle of quantum physics, instead of the usual mathematical assumptions such as the 
difficulty of factoring, it remains secure against an adversary with unlimited computing power. 
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security) for EFT (electronic funds transfer) between corporate customers and all financial institutions, which will 
become operational by the end of 1987. TRASEC ensures the integrity and authentication of EFT in an automated 
environment and is easily integrated in the actual banking procedures. The system is independent of the transfer 
medium, the application, and the configuration and type of the computers of the customer and the financial 
institution. The customer's system consists of a condensing module and an authentication module. The condensing 
module is a one-way-function, implemented as a program on the customer's computer, which condenses a transfer 
file to a digest. The digest is the input of the authentication module, which calculates a digital signature (MAC). 
This authentication module is a smart card which contains the message authentication algorithm based on DES, 
password management, secret keys, passwords, sequence number, etc. 
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Abstract 

Third generation mobile networks aim to offer 'any 
service, anywhere, at any time'. User require privacy 
within these systems in order to feel confident of their 
use. Privacy requirements (in mobile networks) are: 
content, location, and identification privacy, and 
authentication. Differing from previous approaches to 
privacy, the network itself is considered to be an 
unt rusted parry. 

This paper proposes a scheme that allows the user to 
register with the network and remain anonymous (both 
location and identification). Digital mixes are used to 
create anonymity and authentication is achieved through a 
token based scheme. Finally the aspect of information 
leaking to authorised third parties is discussed and billing 
requirements are detailed which involve the use of 'coin' 
like tokens traded for services. 

1. Introduction 

An exciting prospects for future computing is the 
requirements brought about by the demand for user 
mobility. The rapid growth of the cellular telephone 
markets during the last decade [1] has proved that users are 
demanding mobility. This has led to extensive research and 
development towards third generation mobile networks 
known as Universal Mobile Telecommunications System 
(UMTS) [2] in Europe and Future Public Land Mobile 
Telecommunication System (FPLMTS) [2] globally. The 
primary goal of such a network(s) is to provide the user 
with any service, anywhere, any time. 

User mobility is seen as operating on two distinct levels, 
terminal and personal mobility. Terminal mobility allows a 
user to roam whilst carrying a network terminal, such as a 
mobile phone. Personal mobility on the other hand allows 



the user to roam free of the terminal and connect to the 
network through any available terminal. Personal mobility 
is important since it allows the user to connect via 
specialised terminals that offer more advanced services, 
e.g. video conferencing, which may not be personally 
available. Alternatively it allows a user to connect to a 
network that a personal terminal may not be compatible 
with. Personal mobility is achieved through the carrying of 
a subscriber identity module (SIM) that holds sufficient 
details to enable connection to the network from any 
compatible terminal. 

In order for these systems to become ubiquitous users 
need to be convinced that they provide an adequate level 
of security for their needs. This paper looks at the 
architecture for mobile networks (section 2), examines the 
requirements for user privacy in such networks (section 3), 
surveys the existing efforts in mobile security (section 4), 
and finally proposes some research to extend the current 
approaches which will then fulfil the users requirements 
(section 5). 

2. Mobile Networks Architecture 

This section provides some initial background to mobile 
networks followed by a brief description of the architecture 
of current mobile cellular networks. 

The first mobile cellular networks in operation were the 
analog telephone systems. These are referred to as first 
generation mobile networks and had very low security 
(much press being given to cloning phones at the time). 
Second generation networks have appeared more recently 
and are based on digital cellular telephony. These systems, 
such as the Global System for Mobile Communications 
(GSM) in Europe [3], have considerably more security 
(encryption and authentication). Most recently the desire 
for global mobile computing systems has brought about 
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plans for UMTS (in Europe) and FPLMTS. These third 
generation networks are not limited to telephony and are 
aimed to provide a global mobile data network providing a 
secure 'anytime, anywhere, any service' capability. 

In order to avoid the replacement of the existing 
hardware infrastructure it is planned that Intelligent 
Networks [4] concepts should be used. Intelligent 
Networks allows functionality to be built in to the network 
components such as routers. One of the major aims of 
Intelligent Networks is that new services can be developed 
quickly and cost effectively. An example of an Intelligent 
Network service is 'caller waiting'. It is proposed that the 
security features for mobile networks be provided through 
additional Intelligent Network services. 

Mobile terminals in second generation networks (and 
proposed third generation networks), e.g. a mobile phone, 
operate by communicating with cells. These cells send and 
receive, radio waves within a set frequency band (900Mhz 
for GSM). Each cell can handle a set number of channels 
within this range to allow for that number of simultaneous 
users within the cell. A cell may be able to pick up signals 
up to 1km, beyond which the next adjacent cell will handle 
the signals. 1 




fig. 1. Cellular network infrastructure. 

Cells are organised so that they form a hexagonal 
geographic reception structure as shown in figure I. A 
collection of these cells, known as a location area, are 
controlled by a Mobile Switching Centre (MSC). Within 
the MSC are the routing capabilities and other 
hardware/software to handle mobile calls. The Intelligent 
Network software operates in the MSC and as such this is 
where some of the security features will lie. 

Each MSC holds a visitor location register (VLR), a 
database of the current users in the area. Users are 
associated with a home location register (HLR) which 
stores a users profile. The functionality for call 
management (including security) is also held in the MSC 
and uses the VLR and HLR entries to track users. 



When a user enters a new cell it must register with the 
VLR via the cell. If a user leaves a location area that users 
VLR entry must no longer have effect. When registering a 
user the VLR will notify the users HLR so that incoming 
calls can be routed to the correct MSC (and then cell) via 
the entry in the HLR/VLR. This problem is known as 
location management. Much research has been done in this 
area a recent summary of which can be found in [5]. 

3. Privacy Requirements for Mobile Networks 

Privacy, the protection of data from unauthorised 
parties, has never been as important an issue as it is today. 
The range of applications and the value of data being 
transferred is continuously increasing. Press coverage of 
security breaches means that users are more aware of the 
issues than ever and consequently demand adequate 
security for their data. 

Within networking environments there are many 
security measures. Fundamental to most of these is 
encryption, the coding of information using a digital key. 
Encryption can either be symmetric (secret key algorithms, 
e.g. DES [6]) or asymmetric (public key algorithms, e.g. 
RSA [7]). Encryption can be used to provide message 
content privacy and also to build protocols that satisfy 
other security requirements such as authentication (e.g. 
Kerberos [8]). 

A number of research efforts have been targeted at 
understanding the requirements of mobile network 
security. A notable effort was by Federrath et al [9]. The 
authors discuss the security requirements for mobile 
networks and suggested ways of dealing with these. Their 
requirements are categorised into protection of 
confidentiality, integrity, and availability. Confidentiality 
is then categorised into content, location, and addressee 
privacy whilst integrity is categorised into content, 
addressee, and usage integrity. Availability is stated as the 
enabling of communications between parties who wish to 
and are able to communicate. 

The main aim of this research is to achieve 
confidentiality and integrity requirements. As such a more 
pertinent way to categorise the requirements is to look at 
four separate types; content privacy, location privacy, 
identification privacy, and authentication. 

• Content Privacy 

The most basic of the requirements is content privacy, 
ensuring that the contents of a message arc secure from 
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unauthorised parties. A mobile terminal communicates 
with a cell via the air which is an inherently insecure 
medium. An eavesdropper can quite cheaply obtain 
scanning equipment which would enable them to listen to 
messages being transmitted. 

Protection of message content is also required against 
the network itself as it too may be an unauthorised party. 
Users do not expect people to listen in on their business 
and even where a system such as key recovery [10] is in 
use, content privacy is fundamental to user data privacy. 

Another aspect of content privacy is integrity. The 
receiver of a message must be convinced that the message 
is the same message as the one sent by the sender. 
Achieving message integrity will enable communicating 
parties to be sure that their messages have not been 
tampered with (even if the content remained unseen). 

• Location Privacy 

The location of a mobile user should be untraceable to 
unauthorised parties, including the network. However, 
location data should be available in an efficient way to 
authorised parties. 

As a mobile user roams around, the network must be 
able to route messages to that user. In order to do so 
location information must be available. However a mobile 
users location may be sensitive for many reasons. An 
example is where a user travels out of the country on 
holiday. The fact that a user is out of the country is a 
suggestion to a criminal that their house may be worth 
investigating for burglary. 

The network should be denied access to this 
information to prevent the misuse of user data. Users in 
foreign networks might be particularly keen to have their 
location kept secret. Where this network is not their normal 
provider then it would imply that such a network is less 
trustworthy. 

Authorised users may require location information for 
application purposes so it is desirable for the information 
to be available in an authenticated way. One such example 
may be a company service fleet co-ordination application. 
A company wishing to respond to service requests from 
customers would benefit from knowing the location of the 
nearest fleet vehicle to the customer. 

• Identification Privacy 

The identification of mobile users should be private 
from unauthorised users, i.e. mobile users should be 



anonymous. Anonymity in mobile networks is considered 
necessary to prevent misuse of traffic information by third 
parties. The identification of users and terminals may be 
used by third parties to gather usage information for 
services etc. One such misuse may be the selling of access 
information to market research companies. Users desire 
that their activities are not monitored on a personal level 
Again, as with location information, it may be desirable for 
authorised users to have access to identification for 
application purposes, under authenticated conditions. 

• Authentication 

Authentication is the process of proving to a 
communicating party that you are who you say. Each time 
we type in our password into our. office workstation we are 
authenticating ourselves to the local network. Mobile users 
must be able to authenticate themselves to the network and 
to other communicating parties. In addition, the network 
must be able to authenticate itself to a mobile user. 

Authentication is required to establish trust between 
communicating parties. A network will only provide 
service if a mobile user is deemed authentic, in order to 
prevent fraudulent access. A mobile user should not accept 
connection to a network that cannot authenticate itself to 
the mobile user since the user cannot then be sure of the 
intentions of the unauthenticated network. For example a 
network may attempt to charge your home network for 
services that were not actually used. 

4. Existing Solutions Towards Security and 
Privacy 

A considerable amount of research effort has been put 
into the security of mobile networks. Much of this has been 
directed towards achieving content privacy and 
authentication in order to prevent fraudulent use of the 
networks. Unauthorised access to mobile networks is a 
serious issue for both networks and users and such fraud 
was estimated to be as high as $500m in 1993 [11]. This 
section aims to investigate some research work relevant to 
the area and point out some remaining shortcomings. 

• Content Privacy 

Our requirement for content privacy can be provided by 
encryption schemes such as DES [6] and RSA [7J. 
Typically a combination of the two types are used in order 
to aid performance. Secret-key systems are faster but 
require public-key systems initially to distribute keys. 
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Additionally, public-key systems can be used to achieve 
integrity through the use of digital signatures [12]. A 
digital signature is an encrypted code added to a message 
that allows the recipient to authenticate the sender. A 
sender signs a message by encrypting a code that is a 
function of the message with their secret key. A recipient 
decrypting this signature with the senders public key can 
be confident the sender is authentic, since only they could 
have produced the signature (being the only one knowing 
the secret 'signing' key). Signatures also provide message 
integrity as (if correct) they guarantee the message had not 
been altered between sender and recipient. 

• Authentication 

A mobile user must be able to be authenticated by any 
part of the network, and as such by parts that have no prior 
knowledge of it (i.e. VLR's in foreign networks). In 
general, to achieve authentication, a three way protocol is 
used. The user is authenticated to the foreign network by 
the home network and likewise the foreign network is 
authenticated to the user by the users home network. Much 
research has been done in this area, some relevant works 
include [13-17]. 

Although these schemes provide adequate 
authentication in terms of gaining trust for the parties 
involved, and as such meet our requirements for 
authentication, they do not provide the required privacy for 
the users location and identification. In order to 
authenticate a user the identity is required and since the 
underlying network is not assumed to provide location 
privacy the location is revealed simply through the 
addressing of the messages. 

• Location and Identification Privacy 

These two types of privacy work hand in hand. If a 
users identity is private, through a pseudonym, then 
location information is clearly of no use to an attacker. 

There are several works in this area, most notably [17- 
19]. All of these use the concept of a digital mix as first 
introduced by Chaum in [20], and described here in 4.1. 
These works protect the user from third party attacks on 
location and identification but fail to do so from the 
network itself. Hoffs work in [18] does go some way 
towards doing this but fails to achieve this securely 
enough. Details of the problem of Hoffs work are 
discussed in 4.2. 

4.1, Digital Mixes 



A digital mix enables two parties to communicate 
without unauthorised parties being able to determine either 
the message content or the source and destinations of the 
messages. In addition, the sender of a message can remain 
anonymous to the recipient. In order to achieve this an 
intermediate computer called a 'mix' processes messages 
so that header information is hidden from following 
communications. 

A user x, wishing to send a message to another user y, 
encrypts the message under the public key of y, attaches 
y's address and then encrypts this under the public key of 
the mix. The message then appears as an encrypted 
message addressed to the mix. The mix can then decrypt 
the message (leaving the message encrypted only under y's 
public key) and send it onto y. Messages arc signed so that 
integrity of proof of sending is maintained. 

There are several problems with this simplified 
explanation. First y cannot return a message since x's 
address is not known to y. Secondly, although the 
addresses are hidden, a third party could observe the 
input's and outputs to a mix and deduce from message 
sizes the end points of a communication. Finally the mix 
has access to the source and destination addresses thus 
creating a gap in the users anonymity. 

The problem of return addressing is solved by the 
sender encrypting their address into their message using a 
key known only to the mix. The recipient will not be able 
to read the address but can hand the address back to the 
mix with a return message that will allow the mix to pass 
the message back to the original sender. An added bonus 
of return addresses is that these addresses can be used to 
certify mail. If the return address is sent back as part of the 
message then the original sender can mail this back to 
show that the message was received. 

The problem of traceability is solved by the mix 
batching and reordering messages and making fixed length 
messages so that an eavesdropper cannot determine any 
correspondence about the input and outputs to a mix. 

If several mix computers are used, each under a 
different authority then the problem of a mix using traffic 
information is solved unless all participants in the mix 
collaborate. Also the length of the mix will decrease the 
traceability. If a larger number of mixes are involved they 
are likely to be processing a larger number of messages 
thus making the batching process more efficient to 
perform. 
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An implementation of an anonymous remailer (BABEL) 
using digital mixes was detailed by Gulcu and Tsudik in 
[211. This shows some interesting implications of Chaum's 
original paper [20]. Details arc given on chaining mixes 
together to add confusion, using random detours within 
mix routes, making replies anonymous for broadcast 
messages, and decoys within message batches. This latter 
point helps to prevent an attacker from entering all but one 
of the messages into a batch and looking for the remaining 
message to be output from the mix. Although [21] is not 
directed at mobile networks it does offer some interesting 
applications of the digital mix that are relevant to any 
implementation within a mobile network. 

Such an implementation would meet our requirements 
as far as providing location and identification privacy. 
However the static nature of such a mix means that the 
efficiency would vary depending on the location of the 
user using the mix. If a digital mix were to be used in a 
mobile environment then it must be offered as an 
independent service to the network. As such authentication 
of the user may be required for use of the mix. This 
implementation of a mix does not offer these features. 

Perhaps the major drawback for the use of digital mixes 
is their potential inefficiency. To operate correctly they 
require the batching of messages. If used in an 
asynchronous messaging system then where delay was less 
important then this could be acceptable but in a system 
requiring real-time communication (e.g. multimedia data 
such as audio and video) any delay is undesirable. The 
implementation of any such mix would therefore have to 
be carefully thought out. 

4.2. Hoff's Anonymous Subscriber System 

Hoffs work in [18] protects the users location and 
identification information from third parties by the use of 
temporary identification numbers. When a user arrives in a 
cell and registers with the network a digital mix (see 
section 4.1) is used to prevent parts of the network from 
discovering the actual location. The network then stores 
the users international identification with the pseudonym in 
order to route messages. When the user is in a foreign 
network this means the home network does not know the 
actual location but can route messages to the foreign 
network for forwarding. 

This work fails to protect the users information from the 
network where the user is within the local network since 
the pseudonym and identification when stored in this 
instance will simply be a reference to the users location. A 
user in a foreign network will be visible to the home 



network as being in a foreign network (although the exact 
location remains unseen). These two points do not satisfy 
fully the requirements for location privacy which state that 
the network, in addition to external third parties, should 
not be able to determine the location and identification of 
the mobile user. 

The use of a digital mix operated by the network is also 
not a sound proposal since collaboration of the mix and the 
network could lead to user information being revealed. 
Indeed it is not clear exactly how these mix nodes are 
integrated into the network. The operation of a mix in a 
foreign network cannot also be guaranteed. The privacy of 
user data should, as far as possible, be in the user's control 
and therefore, allowing the user to choose a mix setup 
would be highly preferable. 

Finally although this paper addresses the problem of 
mobility management security no detail is given to the 
authentication problems of users moving into new areas. 
Whilst this has been dealt with by [13-17] protection of 
user location and identification data from the network itself 
is not, as mentioned, considered. 

5. Proposed Research to Achieve User Privacy 

We have seen that there have been many interesting 
research efforts towards achieving user privacy in mobile 
networking environments. .Examination of these against the 
set of requirements outlined earlier in this paper revealed 
that there arc a number of remaining deficiencies. This 
section proposes to extend the existing approaches in order 
to achieve full user privacy. This includes privacy from the 
network as well as from third parties. We close this section 
by looking at the problem of information leaking and 
billing for services. 

5.1. Architecture 

It is clearly infeasible to offer solutions that require 
extensive restructuring of the existing infrastructure. Any 
new methods should be implementable within the current 
network software architecture and any hardware additions 
should ideally be as minimal as possible. 

We start by looking at the elements of the architecture 
that are affected by this research and then how these satisfy 
the requirements outlined earlier in the paper (section 3). 
Figure 2 shows the proposed architecture. A 
communicating mobile entity is composed of a user, a 
subscriber identity module (SIM) - smart card, and mobile 
communications terminal. This communicates with the 
local network, as detailed in section 2. In order for a 
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communication to occur a mix network is used between the 
local and home networks (which may be the same 
network). An external user may communicate directly with 
the chosen mix network once given a pseudonym for the 
user. 
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fig 2. Mobile Network Security Architecture. 

The user carries with him/her a subscriber identity 
module (SIM) that holds personal account details and 
allows him/her to connect to the network from a terminal. 
A SIM is a smart card that can hold user information in a 
tamper proof way [22]. The SIM is inserted into a mobile 
terminal to enable personal communications. In this 
research it is required that the SIM contains a tamper proof 
public key pair. The private key of the key pair is only ever 
known to the SIM. This will allow the user to set up secure 
communications and achieve content privacy. A users 
public key should be available to any user wishing to 
communicate- This can be done by storing the key in the 
users home location register (HLR). If desired this could 
then be integrated into some key certification scheme, 
however this is considered outside the scope of this paper. 

When a user roams around the network the network 
must keep track of the user in order to route messages. 
There are two distinct instances when the network will 
have to update location information. Firstly when a 
terminal is switched on or becomes active to the network 
again and secondly a user moving from one location to 
another. In each of these instances the user must register 
with the local mobile switching centre (MSC). 
Authentication must also take place between the three 
components (local MSC, home network, and user). 

Registration starts by the user requesting authentication 
with the local network. In order to do this an authentication 
message is passed to the home network via a user 
designated digital mix. Upon receipt of this request the 
home network can then authenticate the user to the foreign 
network, and the foreign network to the user. As a 



consequence of this registration the home network is 
provided with a pseudonym for the user by retaining the 
return address from the user. 

The authentication process must maintain the privacy of 
the mobile user. The home network will obtain the 
identification of the user (in order to place an entry for in 
the HLR) but must not obtain the location. Authentication 
does not require location information so this is not a 
problem. Identification of the parties involved is more of a 
problem. To achieve authentication of the local network, 
this network must be identified. Identification of this 
network will reveal partial location information to the 
home network. Clearly this is undesirable. 

An alternative authentication is thus required. When the 
user requests authentication the local network passes this 
request anonymously to the home network. The home 
network issues a challenge to the user via the local 
networks return address. The response to this is then 
passed back to the home network which allows the home 
network to reply to the local networks request for mobile 
user authentication. 

Now that the user is authenticated to the local network 
the final step is for the local network to authenticate to the 
user. This is done by asking the local network to 
authenticate itself with the home network. The local 
network passes to the home network, via the mix address 
supplied by the user, an authentication request. This 
request identifies the local network. No connection is made 
with the user at this point. The home network now passes 
back a token to the local network which is produced via a 
blinding protocol as first devised by Chaum in [23]. This 
means that the token can be validated but not linked to a 
particular entity. This token is passed to the user terminal 
which can then submit the token back to the home network. 
The home network then checks the token and replies to the 
user accordingly. 

At this point all three parties have been authenticated 
and the users HLR contains a pseudonym for routing 
messages to the users current MSC. The local network, 
convinced of the authenticity of the user, assigns a 
pseudonym to the user and places an entry into the visitor 
location register (VLR). When an incoming message 
appears for the user, the users home network routes the 
message through the digital mix to the users current MSC 
using the given return address. The MSC can then route 
messages to the user with given the pseudonym entry in the 
VLR. 
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To summarise, the following messages are used in the 
protocol (all messages between the local and home 
networks use the digital mix designated by the user in the 
initial request). The exact content of the messages and the 
encryption's upon each are the topic of future work and 
thus not covered here. 

M = Mobile User; L = Local Network; H = Home 
Network: 



M toL 
L to H 

H to M (via L) 
M to H (via L) 
HtoL 
L to H 

H to M (via L) 
M to H (via L) 
H to M (via L) 



Registration Request 
M Authentication Request 
Challenge for M 
Response to Challenge 
Authentication of M 
L Authentication 
Token for M 

Token for L Authentication 
Authentication of L 



Communications are now approaching anonymous and 
untraceable based on the information known by each 
element of the network. It can of course, never be said to 
be 100% secure. The MSC knows only the pseudonym 
chosen by itself for the user and the address of the mix 
used by the user. Therefore, although it knows the location 
of the user, the real identification is not known. The digital 
mix can only determine that a message between two 
particular MSCs. The home network has no knowledge of 
the location of the user since it is only aware of the digital 
mix return address given in the registration process by the 
user. An end user attempting communication with a mobile 
user is only aware of that users real identification, the 
location remains unknown. Thus by unlinking location and 
identification from the elements of the network the user 
achieves privacy. 

An attacker attempting to discover information could 
determine the identity of the mix used by the user by 
watching the output from the home network. The location 
of the user would be unobtainable to an attacker due to the 
untraceability created by the mix, assuming the mix 
network remains uncom promised. 

It would thus be reasonable to allow an end user to 
cache the address of the mix for further communications. 
When the user becomes unreachable at their current 
location then the user can query the HLR for the new 
location and carry on as before. This would save 
communications being passed through the home network. 

The digital mixes used in mobile networks must be 
operated independently of the mobile network service 



provider. This will allow the user to choose a trustworthy 
mix supplier and make collusion of involved parlies harder 
to achieve. To discover user information collusion would 
be required between the home network, the mix, and the 
current MSC of the user. 

It is a major aim of this research to develop a mix that 
satisfies all the requirements laid out in this paper in a 
reliable and efficient way. As already noted it is 
questionable whether digital mixes are suitable for real 
time communications, a problem which needs seriously 
addressing. The distributed nature of mobile computing 
and the fact that a user could appear anywhere in the world 
means that the starting point of the mix needs to be as 
close to the user as possible. Some method of locating this 
needs to be found in order to prevent messages travelling 
unnecessary distances. Secondly a user subscribing to a 
mix will likely be charged in some way for such a service 
by the mix operators. This means that authentication of the 
user is required by the mix. 

As already stated when the mix is processing messages 
for a user it has no knowledge of who the user is. 
Authenticating the user must therefore not reveal to the 
mix the users identification. One way to achieve this is for 
the mix to charge a flat rate to the user and perform 
authentication on a token basis. Tokens can be issued to 
the user via a blinding protocol. These protocols would 
allow the mix to issue tokens without knowledge of who 
they were issued to so that on receipt they could be 
validated but not linked to a user. Such protocols are found 
within electronic commerce to issue digital coins, an 
example of which is Chaum's work in [23]. 

5.2. Information Leaking 

There may be instances where a trusted third party 
requires the private information concerning a user's 
identity and location, e.g. the company fleet application 
mentioned in section 3. Under such conditions the location 
and identification must become available through the 
network to these end users. This is quite simple to achieve 
on an end-to-end basis since the user can request from the 
local network (with whom it has already been 
authenticated and which is keeping track of the users 
location) it's current location and then transmit this with 
it's identity within a secure anonymous message to the 
requesting end user. 

An alternative to this approach is to store the 
information at the users HLR in a way that it is then only 
readable by an authenticated end user. The problem here is 
in the key distribution. If the same key is used for 
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decryption at all times then it assumes an end user always 
has permission to the information. This may not be the 
case. If a session key is used then when should this key be 
replaced. It is unreasonable for the HLR to keep a copy of 
the location information for each user who wishes to know 
it so it must also be a shared key between any 
authenticated party. It is another goal of this research to 
provide a mechanism to enable authenticated parties to 
query the HLR for a users location information, 

5.3 Billing Requirements 

Billing users for services is required in mobile 
networks. The situation is complicated even further by the 
fact that foreign networks may have to bill the users home 
network when the user receives service within the foreign 
network. In conventional billing systems a specific user is 
charged for a specific service. In order to achieve the 
privacy requirements set out in this paper and yet satisfy 
the network requirements for billing, communications must 
be anonymous yet accountable. This presents an obvious 
problem in that linking communications to a user will form 
a track of that users activities. Clearly this is not 
appropriate according to the users privacy requirements. 

A solution to this problem is to use an anonymous 
tokening system such as those found in electronic 
commerce.A users home network could provide tokens to 
the user which could be stored onto their subscriber 
identity module (SIM) and then used as the user receives 
service from the network. When the user runs out of tokens 
then the user can simply put more onto the card over the 
network by logging onto their account within the home 
network. As with normal billing, the number of token used 
would then indicate to the network how much to bill the 
user. Note that these tokens could even be electronic 
money, but for simplicity it is better to consider them as 
tokens only. 

When the network issues the tokens they can be blinded 
bv using techniques such as those outlined in Chaum [23]. 
The network will be able to check the validity of the token 
but not to whom it was issued. As these token will be used 
for billing the value of the token is recorded against the 
user account, prior to being issued blinded. When a part of 
a network attempts to redeem the token they can be 
validated on-line but, since the token value is already 
accredited to the user the origin of the token is not 
important to the home network. An invalid token will mean 
that the network refuses service. Note that according to 
these schemes, a user attempting to reuse a token will have 
their identity revealed. 



6. Conclusion and Future Work 

Modern mobile networks will allow users to roam into 
any location and still maintain a level of service at any 
time. A major concern is the privacy provided by the 
networks. In addition to providing content privacy users 
expect their location and identification information to be 
treated as confidential. Privacy from the networks as well 
as from third parties is required. In order to do so an 
element of trust is required. This is achieved through a user 
smart card (SIM) which holds secret keys enabling the user 
to set up secure communications with the network and with 
other users. 

Mobile networks operate by holding routing 
information which is updated as the users move around. In 
order to do so in a secure manner the user should move 
around under a pseudonym. A user can do this by agreeing 
with their home location a pseudonym at registration. The 
connection between their identification, the pseudonym, 
and their location must be hidden from the parts of the 
network that hold these details individually. 

Existing work in the field is examined and it is 
discussed that current approaches do not achieve an 
adequate level of protection of user information from the 
network. The proposed research in this paper would allow 
the requirements for user privacy to be achieved to an 
extent that has not been attained before. 

Anonymity of communication can be provided by the 
use of a digital mix as proposed by Chaum in [20). 
However operation of a mix in mobile networks where the 
users location is dynamic would render a traditional mix 
inefficient. Development of a mix that could cope with this 
kind of dynamic behaviour would be of benefit to network 
traffic whilst solving a difficult security problem. In 
addition it is proposed that these mixes should operate 
independently to the network with users paying for such a 
service. An implication of this is that mix-user 
authentication is required, a feature not required in other 
mix implementations. 

Billing within mobile networks is a problem and being 
able to provide anonymous yet accountable service would 
be a novel step forwards. To achieve total privacy in this 
manner would be very important since it would allow users 
to gain a higher level of trust of foreign networks whilst 
allowing these networks to operate effectively. 

An implementation of the proposed ideas in this paper 
has begun. This implementation will simulate the mobile 
network architecture and allow the development and 
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testing of the new authentication, digital mix, information 
leaking, and billing services that are needed to provide the 
required user privacy. 
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MONEY OR BANK) (W) (MACHINE? OR TERMINAL? ?) OR ELECTRONIC () TELLER? ? 

52 11018070 S VIRTUAL OR ONLINE OR ON () LINE OR INTERNET OR NET OR WEB OR WWW OR CYBER 
OR ELECTRONIC OR WEBSITE? OR WEBPAGE? OR WEB ( ) (SITE? OR SERVER? ?) 

53 1304000 ANONYM? OR INCOG? OR PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN OR ?NO?(2N) (PERSONAL OR USER) FROM 20 

54 72001 S S3(5N) (DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR 
IDENTIFICATION OR NAME? ? OR ID) 

55 3656430 S PASSWORD OR PIN OR PERSONAL ( ) (IDENTIFICATION OR ID) () NUMBER OR CODE OR 
KEY OR (PASS OR SECRET) () (WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER 
OR (SECURITY OR ACCESS) 0 (CODE? ? OR KEY? ?) OR USER ( ) (ID OR IDENTIFICATION OR NAME) 

56 523479 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED) () (IN OR 
ON) OR AUTHENTICAT? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING OR 

DISTINCTIVE) ( 10N) (INFORMATION OR DATA OR STATISTIC? ? OR NUMBER? ?) 

57 13464651 S PATRON? ? OR CUSTOMER? ? OR CLIENT? ? OR USER? ? OR SUBSCRIBER? ? OR 
ENROLEE? ? OR PARTICIPANT? ? OR PARTICIPAT?R? ? OR PERSON? ? OR DRIVER? ? OR OPERATOR? ? 
(5N) GENERAT??? OR ACCOMPLISH? OR BRING () ABOUT OR CREATE? OR FORM? ? OR INITIAT? 

58 22039075 S TRANSACTION? ? OR ORDER? ? OR PROCEDURE? ? OR INTERACTION? ? OR DEALING? 
? OR ACTION? ? OR TRADE? ? OR TRADING OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? OR 
SALE? ? OR BUY??? 
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514 12037 S (SI OR S2)(S)S4 

515 212 S S13(S)S14 

516 89 S S15(S)S8 

517 6 S S16 NOT PY>1998 

518 6 "RD (unique items) 
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'On Your Mouse, Get Net, Go! f : The 'New and Improved 1 MCI Great American Net Test to Measure 
Nation's Internet Aptitude 

BUSINESS WIRE 
March 30, 1998 8:4 

Journal Code: WBWE Language: English Record Type: FULLTEXT 
Word Count: 1000 



...compared to determine if the country's Internet skills are improving. 
"Americans are encouraged to log on to this year's test to be 



counted," added Price, in this annual benchmarking competition. The site ( 
www.nettest.mci.com) will be on-line - through July 4, 
1998. Are America's Internet skills improving? 



Set Items Description 

51 5056344 S COMPUTER? ? OR CPU? ? OR CENTRAL()PROCESSING OR PROCESSOR? ? OR SERVER? ? OR 
MINICOMPUTER? f OR MICROCOMPUTER? ? OR PC OR LAPTOP? ? OR HANDHELD? ? OR NOTEBOOK? ? OR 
COMPUTING OR MAINFRAME? ? OR MAIN()(FRAME OR FRAMES) OR SYSTEM? ? OR SELFQSERVIC? OR ATM OR 
ATMS OR ((AUTOMATED OR AUTOMATIC)()(TELLER OR TRANSACTION OR SERVICE) OR CASH OR MONEY OR 
BANK) (W)(MACHINE? OR TERMINAL? ?) OR ELECTRONIC()TELLER? ? 

52 5950852 S VIRTUAL OR ONLINE OR ONQLINE OR INTERNET OR NET OR WEB OR WWW OR CYBER OR 
ELECTRONIC OR WEBSITE? OR WEBPAGE? OR WEB()(SI TE? OR SERVER? ?) 

53 471870 ANONYM? OR INCOG? OR PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN OR ?NO?(2N)(PERSONAL OR USER) FROM 15, 610, 810, 476, 613, 813, 634, 624 

54 31027 S S3(5N)(DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR IDENTIFICATION OR 
NAME? ? OR ID) 

55 2129390 S PASSWORD OR PIN OR PERSONAL()(IDENTIFICATION OR ID)()NUMBER OR CODE OR KEY OR 
(PASS OR SECRET)()(WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER OR 
(SECURITY OR ACCESS)()(CODE? ? OR KEY? ?) OR USER()(ID OR IDENTIFICATION OR NAME) 

56 468778 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED)()(IN OR ON) OR 
AUTHENTICAT? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING OR DISTINCTIVE)(10N)(INFORMATION OR 
DATA OR STATISTIC? ? OR NUMBER? ?) ril „o, ^ 0 

57 6501915 S PATRON? ? OR CUSTOMER? ? OR CLIENT? ? OR USER? ? OR SUBSCRIBER? ? OR ENROLEE? ? 
OR PARTICIPANT? ? OR PARTICIPAT?R? ? OR PERSON? ? OR DRIVER? ? OR OPERATOR? ? (5N) GENERAT??? 
OR ACCOMPLISH? OR BRING()ABOUT OR CREATE? OR FORM? ? OR INITIAT? 

58 8438653 S TRANSACTION? ? OR ORDER? ? OR PROCEDURE? ? OR INTERACTION? ? OR DEALING? ? OR 
ACTION? ? OR TRADE? ? OR TRADING OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? OR SALE? ? 
OR BUY??? 

59 4123 SS1(S)S4 

510 5054 SS2(S)S4 

511 661051 SS7(S)S5 

512 112365 SS7(S)S6 

513 86402 SS7(S)(S5ANDS6) . 

514 7753 S (S1 OR S2)(S)S4 

515 267 SS13(S)S14 

516 94 SS15(S)S8 

517 2352 S S4(S)(S5 OR S6) 

518 1261 SS17(S)S7 

519 639 SS18(S)(S1 OR S2) 

520 452 SS18(S)S1 

521 404 SS18(S)S2 

522 143 SS20(S)S8 

523 150 SS21(S)S8 

524 1135 SS4(10N)(S5ORS6) 

525 464 SS24(20N)S7 

526 324 SS24(5N)S7 

527 812 SS4(5N)S5 

528 204 SS4(5N)S6 

529 959 SS27 0RS28 

530 57 S S27 AND S28 

531 31 SS30(10N)S7 

532 22 S S31 NOT PY>1998 
; show files 

[File 15] ABI/Inform(R) 1971-2007/Feb 03 

(c) 2007 ProQuest Info&Learning. All rights reserved. 



[File 610] Business Wire 1999-2007/Feb 06 
(c) 2007 Business Wire. All rights reserved. 



*File 610: File 610 now contains data from 3/99 forward. Archive data (1986-2/99) is available in File 810. 

[File 8 1 0] Business Wire 1 986- 1 999/Feb 28 
(c) 1999 Business Wire . All rights reserved. 

[File 476] Financial Times Fulltext 1982-2007/Feb 06 
(c) 2007 Financial Times Ltd. All rights reserved. 

[File 6 1 3] PR Ncwswire 1 999-2007/Feb 06 

(c) 2007 PR Newswire Association Inc. All rights reserved. 

*File 613: File 613 now contains data from 5/99 forward. Archive data (1987-4/99) is available in File 813. 

[File 813] PR Newswire 1 987-1 999/Apr 30 

(c) 1999 PR Newswire Association Inc. All rights reserved. 

[File 634] San Jose Mercury Jun- 1985-2007/Feb 02 
(c) 2007 San Jose Mercury News. All rights reserved. 

[File 624] McGraw-Hill Publications 1 985-2007/Feb 06 
(c) 2007 McGraw-Hill Co. Inc. All rights reserved. 

*File 624: Homeland Security & Defense and 9 Piatt energy journals added Please see HELP NEWS624for more 



32/3. K/3 (Item 3 from file: 15) Links 
ABl/lnform(R) 

(c) 2007 ProQuest Info&Learning. All rights reserved. 
01421888 00-72875 
Keep out prying eyes 

El ledge, Don 

Informationweek n629 pp: 102-110 
May 5, 1997 

ISSN: 8750-6874 Journal Code: IWK 

Word Count: 31 13 

Text: 

...registry to store IDs and passwords for all . entities , it solves the 
problem of multiple ID and password pairs. 

Secret keys for authentication between entities are 

distributed on an as -needed basis. Users log on once, and then can 

access all resources within the environment to which they. . . 

32/3, K/5 (Item 5 from file: 15) Links 
ABI/Inform(R) 

(c) 2007 ProQuest lnfo&Learning. All rights reserved. 

01222439 98-71834 1 

How to keep someone from hiding in plain view 

Schwartau. Winn 

Network World vl3n22 pp: 39-40 
May 27, 1996 

ISSN: 0887-7661 Journal Code: NWW 

Word Count: 1139 

Text: 

...as all people with an address ending in .edu, or -do you enforce a 
stronger user- identification and authentication 

mechanism? 

Remotely anonymous 

Dial-up ports into organizations present similar opportunities to the bad 
guys. Once your password... 

32/3 ; K/14 (Item 3 from file: 810) Links 
Business Wire 

(c) 1999 Business Wire . All rights reserved. 
0731671 BW1171 



SFXURITY DYNAMICS : Security Dynamics Enhances Solution for Secure Remote Access 



August 05, 1997 

Byline: Business/Technology Editors 

...authentication software generates a new access 

code every 60 seconds that, when combined with the user's 

secret 

personal identification number (PIN) , 
authenticates the user 

attempting to access a protected network. SoftID authentication 
software works in conjunction with Security Dynamics... 



t s32/6/all 

32/6/1 (Item 1 from file: 15) Links 



02320273 86925987 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
The UNIverse Project: state-of-the-art of the standards, softwares and systems which will underpin the 
development. Part 3: inter library loans protocols multimedia document delivery and authentication and 
directory services 

1998 

Word Count: 5493 

32/6/2 (Item 2 from file: 15) Links 

01691972 03-42962 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
The keys to security 

Aug 31. 1998 Length: 5 Pages 
Word Count: 1731 

32/6/3 (Item 3 from file: 1 5) Links 

' 01421888 00-72875 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 

Keep out prying eyes 

May 5, 1997 Length: 6 Pages 
Word Count: 3113 

32/6/4 (Item 4 from file: 1 5) Links 

01403841 00054828 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 

Web sites that shine 

Feb 24. 1997 Length: 5 Pages 
Word Count: 2756 

32/6/5 (Item 5 from file: 15) Links 

01222439 98-71834 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
How to keep someone from hiding in plain view 

May 27, 1996 Length: 2 Pages 
Word Count: 1 139 



32/6/6 (Item 6 from file: 15) Links 



01023329 96-72722 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
Financial services can now be offered on Internet 

May 1995 Length: 1 Pages 
Word Count: 850 

32/6/7 (Item 7 from file: 15) Links 

00930359 95-79751 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
Smart cards: The next generation 

Sep 1994 Length: 3 Pages 
Word Count: 1639 

32/6/8 (Item 8 from file: 15) Links 

00880405 95-29797 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
Using Fetch, the wonder retriever for FTP 

Jul 1994 Length: 4 Pages 
, Word Count: 1 102 

32/6/9 (Item 9 from file: 15) Links 

00860584 95-09976 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
The danger in FTP 

May 16, 1994 Length: 1 Pages 
Word Count: 377 

32/6/10 (Item 10 from file: 15) Links 

00860581 95-09973 

**USE FORMAT 7 OR 9 FOR FULL TEXT** 
Repelling the wily hacker 

May 16, 1994 Length: 3 Pages 
Word Count: 2361 

32/6/1 1 (Item 1 1 from file: 15) Links 



00481175 90-06932 

Plan for Nitty Gritty in UNIX Changeover (Part 6) 

Dec 1989 Length: 1 Pages 

32/6/12 (Item 1 from file: 810) Links 

0951691 BW1385 

OCG TECHNOLOGIES : Internet Service introduced by OCG Technology 

December 14, 1998 
32/6/13 (Item 2 from file: 810) Links 
0950973 BW1200 

OCG TECHNOLOGIES : Internet Service introduced by OCG Technology 

December 11, 1998 
32/6/14 (Item 3 from file: 810) Links 
0731671 BW1171 

SECURITY DYNAMICS : Security Dynamics Enhances Solution for Secure Remote Access 

August 05, 1997 

32/6/15 (Item 4 from file: 810) Links 
0711169 BW1138 

AXENT 2 : AXENT's OmniGuard/ESM 4.4 identifies more than 90 security weaknesses in Windows NT 

June 09, 1997 

32/6/16 (Item 5 from file: 810) Links 
0675005 BW0089 

PEP INC : New PC smart card reader boosts online transaction security; Southern California firm 
introduces "Authenticator" to eliminate transaction interception, hacker decoding, fraud risk 

February 24, 1997 



32/6/17 (Item 6 from file: 810) Links 
0432750 BW1094 

COMPAQ COMPUTER : Compaq Announces Customer Support On The Internet 

September 28, 1994 
32/6/18 (Item 7 from file: 810) Links 
0262367 BW693 

SECURITY DYNAMICS : Security Dynamics granted temporary restraining order against TymTech 

January 29, 1992 

32/6/19 (Item 1 from file: 813) Links 
0855726 AT014 

SCIENTIFIC-ATLANTA TO PROVIDE GROUND STATIONS TO E-SYSTEMS FOR SPACE IMAGING 
INC. 



Date: August 31, 1995 
Word Count: 51 1 

32/6/20 (Item 2 from file: 813) Links 
0740473 DC035 

GSA DOD RELEASE FINAL ELECTRONIC COMMERCE ACQUISITION GUIDELINES; GSA'S 
JOHNSON SAYS GUIDELINES WILL REFORM FEDERAL PROCUREMENT AND PRODUCE 
EFFICIENCY AND SAVINGS 



Date: September 9, 1994 
Word Count: 780 

32/6/21 (Item 1 from file: 624) Links 



0643289 

WARDING OFF THE CYBERSPACE INVADERS: Internet crime 

is rising, but there are ways to reduce the threat 
March 13, 1995 
WORD COUNT: 1,239 



32/6/22 (Item 2 from file: 624) Links 



0495714. 

Locating and Retrieving Internet Files 

July, 1993 

WORD COUNT: 2, 153 




Set Items Description 

51 15702375 S COMPUTER? ? OR CPU? ? OR CENTRAL()PROCESSING OR PROCESSOR? ? OR SERVER? ? OR 
MINICOMPUTER? f OR MICROCOMPUTER? ? OR PC OR LAPTOP? ? OR HANDHELD? ? OR NOTEBOOK? ? OR 
COMPUTING OR MAINFRAME? ? OR MAIN()(FRAME OR FRAMES) OR SYSTEM? ? OR SELFQSERVIC? OR ATM OR 
ATMS OR ((AUTOMATED OR AUTOMATIC)()(TELLER OR TRANSACTION OR SERVICE) OR CASH OR MONEY OR 
BANK) (W)(MACHINE? OR TERMINAL? ?) OR ELECTRONIC()TELLER? ? 

52 17221272 S VIRTUAL OR ONLINE OR ON()LINE OR INTERNET OR NET OR WEB OR WWW OR CYBER OR 
ELECTRONIC OR WEBSITE? OR WEBPAGE? OR WEB()(SITE? OR SERVER? ?) 

53 1171702 ANONYM? OR INCOG? OR PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN OR ?NO?(2N)(PERSONAL OR USER) FROM 9, 275, 621, 636, 16, 160, 148 

54 80752 S S3(5N)(DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR IDENTIFICATION OR 
NAME? ? OR ID) 

55 5338001 S PASSWORD OR PIN OR PERSONAL()(IDENTIFICATION OR ID)()NUMBER OR CODE OR KEY OR 
(PASS OR SECRET)()(WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER OR 
(SECURITY OR ACCESS)()(CODE? ? OR KEY? ?) OR USER()(ID OR IDENTIFICATION OR NAME) 

56 842908 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED)()(IN OR ON) OR 
AUTHENTICAT? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING' OR DISTINCTIVE)(10N)(INFORMATION OR 
DATA OR STATISTIC? ? OR NUMBER? ?) 

57 462804 S (PATRON? ? OR CUSTOMER? ? OR CLIENT? ? R PERSON? ? OR DRIVER? ? OR OPERATOR? 
?)(5N)(GENERAT??? OR ACCOMPLISH? OR BRING()ABOUT OR CREATE? OR FORM? ? OR INITIAT?) 

58 2394236 S TRANSACTION? ? 

59 2827 SS4(10N)S5 

510 859 SS4(10N)S6 

511 337 SS9ANDS10 

512 0 SS11(10N)S7 

513 0 SS11(S)S7 

514 5534 SS4(S)S5 

515 1572 SS4(S)S6 

516 702 S S14 AND S15 

517 9 SS16(S)S7 

518 1 S S17 NOT PY>1998 
; show files 

[File 9] Business & Industry(R) Jul/1 994-2007/Feb 05 
(c) 2007 The Gale Group. All rights reserved. 

[File 275] Gale Group Computer DB(TM) 1983-2007/Feb 02 
(c) 2007 The Gale Group. All rights reserved. 

[File 621] Gale Group New Prod.Annou.(R) 1 985-2007/Jan 29 
(c) 2007 The Gale Group. All rights reserved. 

[File 636] Gale Group Newsletter DB(TM) 1 987-2007/Feb 02 
(c) 2007 The Gale Group. All rights reserved. 

[File 16] Gale Group PROMT(R) 1 990-2007/Feb 02 
; (c) 2007 The Gale Group. All rights reserved. 

[File 160] Gale Group PROMT(R) 1972-1989 
(c) 1 999 The Gale Group. All rights reserved. 

[File 148] Gale Group Trade & Industry DB 1 976-2007/Jan 29 
(c)2007 The Gale Group. All rights reserved. 



18/3,K/1 (Item 1 from file: 636) Links 

Gale Group Newsletter DB(TM) 

(c) 2007 The Gale Group. All rights reserved. 

0366702 1 Supplier Number: 47899724 (USE FORMAT 7 FOR FULLTEXT) 

SECURITY DYNAMICS: Security Dynamics launches new version of SoftID authentication software 

M2 Presswire , p 1M/A 
August 11 , 1997 

Language: English Record Type: Fulltext 
Document Type: Newswire ; Trade 
Word Count: 616 



...to install and use, but still allowing remote network access. 

The new version of SoftID authentication software allows 
installation to take place over the network. Previously, installation could 
only be accomplished. . . 

...access from a shared machine can be accomplished without end users 
having to share their secret PINs. Customisable information 
fields have been added to the SoftID administration program to allow 
tracking of additional user. . . 

...The administration program also allows user information to be edited 
after a SoftID has been created. 

"Time and time again our customers tell us that one of their 
top requirements for security products is making them easier. . . 



Set Items Description 

51 29321- S COMPUTER? ? OR CPU? ? OR CENTRAL () PROCESSING OR PROCESSOR? ? OR SERVER? 
-> OR MINICOMPUTER? ? OR MICROCOMPUTER? ? OR PC OR LAPTOP? ? OR HANDHELD? ? OR NOTEBOOK? ? 
OR COMPUTING OR MAINFRAME? ? OR MAIN ( ) (FRAME OR FRAMES) OR SYSTEM? ? OR SELF ( ) SERVIC? OR 
ATM OR ATMS OR ((AUTOMATED OR AUTOMATIC) () (TELLER OR TRANSACTION OR SERVICE) OR CASH OR 
MONEY OR BANK) (W) (MACHINE? OR TERMINAL? ?) OR ELECTRONIC () TELLER? ? 

52 19027 S VIRTUAL OR ONLINE OR ON () LINE OR INTERNET OR NET OR WEB OR WWW OR CYBER 
OR ELECTRONIC -OR WEBSITE? OR WEB PAGE? OR WEB ( ) (SITE? OR SERVER? ?) 

53 535 ANONYM? OR INCOG? OR PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN 'OR ?NO?(2N) (PERSONAL OR USER) FROM 256 

54 ' 76 S S3(5N) (DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR 
IDENTIFICATION OR NAME? ? OR ID) 

55 4130 S PASSWORD OR PIN OR PERSONAL ( ) (IDENTIFICATION OR ID) () NUMBER OR CODE OR 
KEY OR (PASS OR SECRET) () (WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER 
OR (SECURITY OR ACCESS) 0 (CODE? ? OR KEY? ?) OR USER ( ) (ID OR IDENTIFICATION OR NAME) 

56 H78 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED) {) (IN OR 
ON) OR AUTHENTICAT? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING OR 

DISTINCTIVE) (ION) (INFORMATION OR DATA OR STATISTIC? ? OR NUMBER? ?) 

57 21752 • S PATRON? ? OR CUSTOMER? ? OR CLIENT? ? OR USER? ? OR SUBSCRIBER? ? OR 
ENROLEE? ? OR PARTICIPANT? ? OR PARTICIPAT?R? ? OR PERSON? ? OR DRIVER? ? OR OPERATOR? ? 
(5N) GENERAT??? OR ACCOMPLISH? OR BRING () ABOUT OR CREATE? OR FORM? ? OR INITIAT? 

58 11802 S TRANSACTION? ? OR ORDER? ? OR PROCEDURE? ? OR INTERACTION? ? OR DEALING? 
? OR ACTION? ? OR TRADE? ? OR TRADING OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? OR 
SALE? ? OR BUY??? 
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[File 256] TecInfoSource 82-2007/Aug 

(c) 2007 info.Sources Inc. All rights reserved. 



Set Items Description 

51 1008474 S COMPUTER? ? OR CPU? ? OR CENTRAL()PROCESSING OR PROCESSOR? ? OR SERVER? ? OR 
MINICOMPUTER? ? OR MICROCOMPUTER? ? OR PC OR LAPTOP? ? OR HANDHELD? ? OR NOTEBOOK? ? OR 
COMPUTING OR MAINFRAME? ? OR MAIN()(FRAME OR FRAMES) OR SYSTEM? ? OR SELF()SERVIC? OR ATM OR 
ATMS OR ((AUTOMATED OR AUTOMATIC)()(TELLER OR TRANSACTION OR SERVICE) OR CASH OR MONEY OR 
BANK) (W)(MACHINE? OR TERMINAL? ?) OR ELECTRONIC()TELLER? ? 

52 1944410 S VIRTUAL OR ONLINE OR ON()LINE OR INTERNET OR NET OR WEB OR WWW OR CYBER OR 
ELECTRONIC OR WEBSITE? OR WEBPAGE? OR WEB()(SITE? OR SERVER? ?) 

53 143571 ANONYM? OR INCOG? OR PSEUDO? OR SECRET OR UNDISCLOSE? OR UNSPECIF? OR 
UNKNOWN OR ?NO?(2N)(PERSONAL OR USER) FROM 625, 268, 626, 267, 608 

54 9083 S S3(5N)(DATA OR DEMOGRAPHIC? ? OR INFORMATION OR NUMBER? ? OR IDENTIFICATION OR 
NAME? ? OR ID) 

55 400815 S PASSWORD OR PIN OR PERSONAL()(IDENTIFICATION OR ID)()NUMBER OR CODE OR KEY OR 
(PASS OR SECRET)()(WORD? ? OR PHRASE? ? OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER OR 
(SECURITY OR ACCESS)()(CODE? ? OR KEY? ?) OR USER()(ID OR IDENTIFICATION OR NAME) 

56 55528 S LOGON OR LOGIN OR (LOG OR LOGG? OR SIGN OR SIGNING OR SIGNED)()(IN OR ON) OR 
AUTHENTICAT? OR (UNIQUE OR UNCOMMON OR DISTINGUISHING OR DISTINCTIVE)(10N)(INFORMATION OR 
DATA OR STATISTIC? ? OR NUMBER? ?) 

57 1639126 S PATRON? ? OR CUSTOMER? ? OR CLIENT? ? OR USER? ? OR SUBSCRIBER? ? OR ENROLEE? ? 
OR PARTICIPANT? ? OR PARTICIPAT?R? ? OR PERSON? ? OR DRIVER? ? OR OPERATOR? ? (5N) GENERAT??? 
OR ACCOMPLISH? OR BRING()ABOUT OR CREATE? OR FORM? ? OR INITIAT? 

58 2436108 S TRANSACTION? ? OR ORDER? ? OR PROCEDURE? ? OR INTERACTION? ? OR DEALING? ? OR 
ACTION? ? OR TRADE? ? OR TRADING OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? OR SALE? ? 
OR BUY??? 

59 1459 SS1(S)S4 

510 1616 SS2(S)S4 

511 98388 SS7(S)S5 

512 17180 SS7(S)S6 

513 6622 S S7(S)(S5 AND S6) 

514 2415 S(S1 ORS2)(S)S4 

515 2415 S(S1 ORS2)(S)S4 

516 673 SS4(S)S5 

517 129 SS4(S)S6 

518 53 S S16 AND S17 

519 12 SS18NOTPY>1998 

520 12 RD (unique items) 
; show files 

[File 625] American Banker Publications 1 98 1 -2007/Feb 05 
(c) 2007 American Banker. All rights reserved. 

[File 268] Banking Info Source 198l-2007/Jan W4 
(c) 2007 ProQuest Info&Learning. All rights reserved. 

[File 626] Bond Buyer Full Text 1 98 1 -2007/Feb 06 
(c) 2007 Bond Buyer. All rights reserved. 

[File 267] Finance & Banking Newsletters 2007/Feb 05 
(c) 2007 Dialog. All rights reserved. 



[File 608] KR/T Bus.News. 1992-2007/Feb 06 

(c)2007 Knight Ridder/Tribune Bus News. All rights reserved. 



20/3.K/1 (Item 1 from file: 625) Links 

American Banker Publications 

(c) 2007 American Banker. All rights reserved. 

0195280 

Card Frontiers: Gemplus in Deal with Maker of Random-Password Device; Many Uses Seen 

American Banker - February 26, 1997 ; Pg. 12 ; Vol. 162 , No. 38 
Document Type: Journal Language: English Record Type: Fulltext 
Word Count: 327 

Byline: 

By JEFFREY KUTLER 
Text: 



. . .has helped establish Security Dynamics as 

the world leader in what it calls two- factor authentication, with 
1-5 

million users in 1,600 companies. By combining a computer operator's 
secret 

code with the random number, SecurlD gets around one of the 
biggest 

security hazards in on-line networks- the reusable password, which is 
especially vulnerable to hacker attacks. 

Security Dynamics also gained the preeminent position in. . . 

20/3, K/2 (Item 2 from file: 625) Links 

American Banker Publications 

(c) 2007 American Banker. All rights reserved. 

0051045 

Card-Size Device May Solve On-Line Password Security Problem 

American Banker - April 9, 1 986 ; Pg. 1 1 ; Vol. 1 5 1 , No. 70 
Word Count: 707 

Byline: 

By MICHAEL WEITMSTEFN 
Text: 



. . .computer to verify the 
user's identity. 

"It raises the level of security above a password," Mr. Darwin 
said. Now, 



users generally enter a secret password - often issued by the 
data, base 

operator - to identify themselves when logging on to a 
computer system. ' 

But. computer security experts have never been entirely comfortable with 
the ; . . 

20/3,K/3 (Item 1 from file: 268) Links 
Banking Info Source 

(c) 2007 ProQuest Info&Learning. All rights reserved. 
00349329 (USE FORMAT 7 OR 9 FOR FULLTEXT) 
Smart cards, coming up to bat 

Bielski, Lauren 

ABA Banking Journal , v 90 , n 1 1 , p 57-62 , Nov 1998 Document Type: Journal Article Language: English 
Record Type: Abstract Fulltext 
Word Count: 01927 

Abstract: 

...standards will prompt many vendors, merchants, and ultimately consumers 
to begin using smart cards. The key is to develop multi-use smart 
cards. Some envision a future where the typical consumer would carry one 
card that houses personal information, another for 

business authentication, and another for cash replacement. A pilot 
launched in July 1998 with MBNA involves the... 



20/3 ; K/4 (Item 2 from file: 268) Links 
Banking Info Source 

(c) 2007 ProQuest Info&Learning. All rights reserved. 
00337584 (USE FORMAT 7 OR 9 FOR FULLTEXT) 
Smart cards 

Anonymous 

Retail Delivery Strategies , v 9 , p 5-27 , 1998 Document Type: Journal Article Article Type: News Language: 
English Record Type: Abstract Fulltext 
Word Count: 12720 



...some basic knowledge and a little time, it is quite easy to read the 
machine code that software comprises. Most of the security features 
embedded into computer games can be cracked. . . 

...owned by BULL S.A.) and no secret stored in the memory ever leaves this 

unique secure component inside the chip. Data residing in the 

host or terminal are sent to the card. This information is then combined 

with the information in the card and the secret keys in the 

chip are applied to algorithms. During this process, no secret ever leaves 



...then sent back to the host or terminal. No indication of the value of 
the key the smart card has used is given to the outside world. 
Using very sophisticated techniques. . . 



20/3,K/5 (Item 3 from file: 268) Links 
Banking Info Source 

(c) 2007 ProQuest Jnfo&Learning. All rights reserved. 
00286 1 94 (USE FORMAT 7 OR 9 FOR FULLTEXT) 
Is this network secure? 

Noe, Jeffrey 

America's Community Banker ,v5,n5,p!2-16, May 1996 Document Type: Journal Article Language: 
English Record Type: Abstract Fulltext 
Word Count: 02541 



. . .on as a unit by a computer. 

DES enciphers and chains eight -byte blocks of data using a 
secret key to provide a unique result. The key 

is eight bytes long. Fifty-six of the key's bits are used in a 
mathematical permutation encrypting the data. 
DES also generates a. . . 

. .'.that an unknown party can prove his or her identity by encrypting and 
returning a pseudorandom number- -a random number 

generated by a definite, nonrandom computational process-sent- from the 
controlling party using a secret password presumed to be known by 
both parties . 

The controlling party then decrypts the result using... 
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...Web servers, Open Market claims its products handle the 
multi -dimensional issue of security. User authentication in the form 
of passwords, secret numbers and even smart cards can be 
implemented, as well as "smart statements" that pinpoint exact... 
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. . .of smart cards will guarantee the identity of the sender and remove the 
need for secret information to be sent through the mail. 
Under the User Security Enhancemen program, some 16,000... 



...of smart cards will guarantee the identity of the sender and remove the. 

need for secret information to be sent through the post . The 

SWIFT secretariat will be able to transmit tables of access 

codes to member banks across the network. And member banks will use 

the network itself to exchange bilateral authentication keys. 

Under the USE programme some 16,000 readers (a basic reader for access 
and. . . 

...the tedious requirement for dealing with paper-based correspondence. And 

with the smart card reader, 'secret' data need never be 

displayed to human eyes. Bilateral keys will be digitally signed; this 

enables the receiver to authenticate the true identity of the 

sender . " 

The roll-out' is proceeding on a phased basis... 

...will also mean a drastic decrease in the workload involved in bilateral 

key exchanges. Supposedly secret information will no longer 

be visible to human eyes. But it will be expensive. In addition... 

...computer interfaces with the network and there will be on-going costs 
for the bilateral key exchange system. Security has its price." 
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...the secure socket layer protocol. SSL is an open, non-proprietary 
protocol that provides privacy, authentication and reliability but 
not always positive identification. 

Transmissions between users over an SSL network are private because each 
user has a secret key that encrypts the data. The U.S. 

version uses a difficult- to-crack 128-bit algorithm for data encryption... 

...does allow a much less robust 40-bit version to be exported. 

SSL communications are authenticated because each party can verify 
each other's identity using standard public key algorithms. This 
does not, however, safeguard against individuals who have falsely gained 
another identity. SSL. . .be attributed to an individual but also can be 
stolen or discovered by hackers. A PIN is a "secret key" 

known to both the user and the system to gain and validate access using one 



...a complementary set of matched keys, private and public, to ensure 
positive identification. Your private key resides on your server and 
can be only accessed by you. Your public key is widely disseminated 
and can be used by others to encrypt information sent to you. You then 
decode the information using your private key. 

In the reverse; information you create with the private key 
contains your digital signature, which can be decoded only with your public 
key to verify the digital signature. Your private key cannot 
be derived from the public key, so it's safe from theft by hackers. 

Companies that provide this software refer to it as public key 
infrastructure or PKI . Two of the largest vendors are Verisign 
(www.verisign.com) and Entrust... 
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...address one of their most significant concerns - the need for long-term care - in a unique way. It's no secret that 
the number of people over the age of 55 is growing in unprecedented ways, and the trend... 

Text: 

...address one of their most significant concerns - the need for long-term 
care - in a unique way. It's no secret that the number 

of people over the age of 55 is growing in unprecedented ways, and the 
trend. . . 

...an uncertain future, living longer poses additional challenges - 
personal and financial - for older adults. A key question is how to 
manage financial resources to strike a balance between enjoying life and... 

20/3,K/10 (Item 3 from file: 267) Links 
Finance & Banking Newsletters 
(c) 2007 Dialog. All rights reserved. 
00037657 

CONCERN AWAITS ATMs THAT USE BIOMETRICS Diebold Debuts Facial, Voice Scans At BAI Retail 
Delivery Conference '97 

EFT REPORT 

December 3, 1997 Vol: 20 Issue: 24 Document Type: NEWSLETTER 
Publisher: PHILLIPS BUSINESS INFORMATION 

Language: ENGLISH Word Count: 1062 Record Type: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 

Text: 



. . .U.S. market . 

The public's receptiveness to having body parts take the place of 
personal identification number-based cards at the ATM, 
however, is an 

unknown. Battle lines, nevertheless, are being drawn. 

Vendors and biometric advocates sing the praises of a body part's 
ultimate authentication of a user, and the convenience 
of a passive, silent scan. Civil libertarians, however, raise... 

... to 

secure their assets," Atick says. "They recognize they can lose their 



card and their PIN is not safe. At the end of the day, you have to 
justify the use... in many cases we don't, " he says. "One possible 
objection is when [the scanned information] is shared across 
databases 

your anonymity will be intruded upon, where historically you were 
able 

to be anonymous. In some future... 
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...in Moscow and 55 in Prague. 

But Rudloff readily admits to a flaw in one key area of his 

strategy. An ideas man - some of his best are apparently dreamed 

up... all, six partners have left. New ones joined, so there are now 

11, including an undisclosed number of the eight founding 

partners. One of the early departures was Stuart Lucas, who for...depui 

chairman of Swiss drugs company Novartis, formerly Sandoz and 

Ciba-Geigy . ) 

Impressive performance 

A key part of equity capital markets is the sales force in 
Geneva, which should come as ... business will be 
channelled via MC's London headquarters. 

Equity stake 

But the deal's key benefit for BBL is its majority control of a 

large eastern European operation. "Outside of... locals, has only eight 

expatriates. The 

heavy weighting in Russians is aptly reflected by a sign on 
the 

stairs saying "Cigarettes Only". Downstairs in a homely corporate 
kitchen the heavy smokers can. . . 
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Text: 

.of you who will dig in that way, here are the biggies. 
For ftp, use "anonymous" as your login name when 
signing on to the site 

and use your e-mail address as the password. Then use "cd" to 
forward to 

a specified directory, such as "cd pub" to... 



